cf9b852d25d3cf03e87f511f53b991548c2ae595e020417bc498196ea0281842

Analysis

max time kernel
36s
max time network
142s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
28/09/2026, 12:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
silence_x64.dll
Size 201KB
Sample260928-plndlsvvbw
SHA256 cf9b852d25d3cf03e87f511f53b991548c2ae595e020417bc498196ea0281842
MD5 87b9ce2b2e832f271638fd248f224a6f
SHA1 b6d0d3dbe81dd16cf657722c82a7cec21316acba
SHA512 c489dbd463156d7c583a61b4ced0df8becb8d133e0440046cd59a6e53f5202740386359c617c3fed1e9de0cc836b799ca4ea68606978cd0d86bb48c462c912a5
SSDEEP 3072:DMwedmRMvM8FBe4h41CqTv2Y11fXmyu6NL21ZbbXzNXyE1FZ9tE66meo2MWCls7u:l9RqMe/qiIvmU9+xrtysO5NEvzNs
TLSH
T127147D40B881C036D6BF0974457ACF664A7EBC514B60D9CBB7844DFE4E346C0AB39B5A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

defense_evasion discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 64 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe

Kills process with taskkill 64 IoCs

defense_evasion

pid	Process
2680	taskkill.exe
460	Process not Found
4488	Process not Found
1908	taskkill.exe
5884	taskkill.exe
3088	taskkill.exe
4408	Process not Found
1464	Process not Found
5560	Process not Found
4624	taskkill.exe
1796	taskkill.exe
3096	Process not Found
472	taskkill.exe
5064	taskkill.exe
5740	Process not Found
4908	Process not Found
5184	Process not Found
5044	Process not Found
4520	Process not Found
3052	Process not Found
5340	Process not Found
3528	taskkill.exe
5928	taskkill.exe
700	Process not Found
3056	Process not Found
1640	Process not Found
4016	taskkill.exe
4408	taskkill.exe
5744	taskkill.exe
2460	Process not Found
1864	Process not Found
1500	taskkill.exe
2764	Process not Found
2616	Process not Found
796	Process not Found
1208	taskkill.exe
1964	taskkill.exe
3188	taskkill.exe
5884	taskkill.exe
5560	taskkill.exe
2748	taskkill.exe
2084	taskkill.exe
3428	Process not Found
2084	Process not Found
2448	taskkill.exe
4448	taskkill.exe
1384	Process not Found
3052	taskkill.exe
996	Process not Found
3064	Process not Found
4264	taskkill.exe
2580	taskkill.exe
3256	taskkill.exe
5500	taskkill.exe
2956	Process not Found
1412	taskkill.exe
2496	taskkill.exe
5212	taskkill.exe
4336	Process not Found
3052	Process not Found
1812	taskkill.exe
3256	taskkill.exe
3280	taskkill.exe
3792	Process not Found

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4936 wrote to memory of 1632	4936	rundll32.exe	89
PID 1632 wrote to memory of 3632	1632	rundll32.exe	90
PID 1632 wrote to memory of 4116	1632	rundll32.exe	91
PID 1632 wrote to memory of 4996	1632	rundll32.exe	92
PID 1632 wrote to memory of 2244	1632	rundll32.exe	93
PID 1632 wrote to memory of 2552	1632	rundll32.exe	94
PID 1632 wrote to memory of 1128	1632	rundll32.exe	95
PID 1632 wrote to memory of 3840	1632	rundll32.exe	96
PID 1632 wrote to memory of 5024	1632	rundll32.exe	97
PID 1632 wrote to memory of 1248	1632	rundll32.exe	98
PID 1632 wrote to memory of 5836	1632	rundll32.exe	99
PID 1632 wrote to memory of 3460	1632	rundll32.exe	110
PID 1632 wrote to memory of 2308	1632	rundll32.exe	111
PID 1632 wrote to memory of 2296	1632	rundll32.exe	112
PID 1632 wrote to memory of 5000	1632	rundll32.exe	113
PID 1632 wrote to memory of 2876	1632	rundll32.exe	114
PID 1632 wrote to memory of 2352	1632	rundll32.exe	115
PID 1632 wrote to memory of 2704	1632	rundll32.exe	116
PID 1632 wrote to memory of 1568	1632	rundll32.exe	117
PID 1632 wrote to memory of 2976	1632	rundll32.exe	119
PID 1632 wrote to memory of 5564	1632	rundll32.exe	120
PID 1632 wrote to memory of 4300	1632	rundll32.exe	130
PID 1632 wrote to memory of 1108	1632	rundll32.exe	131
PID 1632 wrote to memory of 3196	1632	rundll32.exe	132
PID 1632 wrote to memory of 5772	1632	rundll32.exe	133
PID 1632 wrote to memory of 4744	1632	rundll32.exe	248
PID 1632 wrote to memory of 2084	1632	rundll32.exe	241
PID 1632 wrote to memory of 3432	1632	rundll32.exe	138
PID 1632 wrote to memory of 4488	1632	rundll32.exe	141
PID 1632 wrote to memory of 4468	1632	rundll32.exe	142
PID 1632 wrote to memory of 2456	1632	rundll32.exe	144
PID 1632 wrote to memory of 1276	1632	rundll32.exe	150
PID 1632 wrote to memory of 756	1632	rundll32.exe	151
PID 1632 wrote to memory of 3412	1632	rundll32.exe	152
PID 1632 wrote to memory of 1232	1632	rundll32.exe	153
PID 1632 wrote to memory of 3312	1632	rundll32.exe	154
PID 1632 wrote to memory of 2004	1632	rundll32.exe	359
PID 1632 wrote to memory of 3908	1632	rundll32.exe	268
PID 1632 wrote to memory of 5992	1632	rundll32.exe	362
PID 1632 wrote to memory of 3392	1632	rundll32.exe	162
PID 1632 wrote to memory of 5832	1632	rundll32.exe	163
PID 1632 wrote to memory of 4676	1632	rundll32.exe	170
PID 1632 wrote to memory of 1096	1632	rundll32.exe	381
PID 1632 wrote to memory of 2892	1632	rundll32.exe	475
PID 1632 wrote to memory of 952	1632	rundll32.exe	173
PID 1632 wrote to memory of 4016	1632	rundll32.exe	385
PID 1632 wrote to memory of 5220	1632	rundll32.exe	178
PID 1632 wrote to memory of 5692	1632	rundll32.exe	180
PID 1632 wrote to memory of 1328	1632	rundll32.exe	181
PID 1632 wrote to memory of 1044	1632	rundll32.exe	182
PID 1632 wrote to memory of 4636	1632	rundll32.exe	183
PID 1632 wrote to memory of 1744	1632	rundll32.exe	190
PID 1632 wrote to memory of 5688	1632	rundll32.exe	191
PID 1632 wrote to memory of 588	1632	rundll32.exe	300
PID 1632 wrote to memory of 4672	1632	rundll32.exe	193
PID 1632 wrote to memory of 4428	1632	rundll32.exe	399
PID 1632 wrote to memory of 4664	1632	rundll32.exe	197
PID 1632 wrote to memory of 4264	1632	rundll32.exe	199
PID 1632 wrote to memory of 4272	1632	rundll32.exe	491
PID 1632 wrote to memory of 2660	1632	rundll32.exe	202
PID 1632 wrote to memory of 4716	1632	rundll32.exe	204
PID 1632 wrote to memory of 2472	1632	rundll32.exe	516
PID 1632 wrote to memory of 4152	1632	rundll32.exe	211
PID 1632 wrote to memory of 4604	1632	rundll32.exe	212

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\silence_x64.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:4936
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\silence_x64.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:1632
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:3632
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:4116
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    - System Location Discovery: System Language Discovery
    PID:4996
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:2244
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:2552
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:1128
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:3840
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:5024
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:1248
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:5836
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    - System Location Discovery: System Language Discovery
    PID:3460
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    - System Location Discovery: System Language Discovery
    PID:2308
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    - System Location Discovery: System Language Discovery
    PID:2296
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    - System Location Discovery: System Language Discovery
    PID:5000
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:2876
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:2352
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:2704
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:1568
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:2976
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:5564
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:4300
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    - System Location Discovery: System Language Discovery
    PID:1108
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:3196
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:5772
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:4744
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:2084
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:3432
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:4488
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:4468
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:2456
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:1276
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:756
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:3412
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    - System Location Discovery: System Language Discovery
    PID:1232
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:3312
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:2004
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:3908
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    - System Location Discovery: System Language Discovery
    PID:5992
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:3392
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:5832
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:4676
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    - System Location Discovery: System Language Discovery
    PID:1096
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:2892
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:952
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    - Kills process with taskkill
    PID:4016
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:5220
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:5692
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:1328
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:1044
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:4636
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    - System Location Discovery: System Language Discovery
    PID:1744
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:5688
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:588
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:4672
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:4428
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:4664
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:4264
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:4272
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:2660
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:4716
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    - System Location Discovery: System Language Discovery
    PID:2472
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:4152
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:4604
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:1056
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:5084
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:6096
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:1456
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:3880
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:3728
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:2308
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:5252
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:4448
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    - System Location Discovery: System Language Discovery
    PID:1600
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:3268
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:1628
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:3008
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    - Kills process with taskkill
    PID:2084
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    - System Location Discovery: System Language Discovery
    - Kills process with taskkill
    PID:2748
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:4744
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    - System Location Discovery: System Language Discovery
    PID:672
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:3704
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    - System Location Discovery: System Language Discovery
    PID:5904
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:2444
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    - System Location Discovery: System Language Discovery
    PID:2588
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:3980
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:3064
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:4908
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    - System Location Discovery: System Language Discovery
    PID:1608
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:3568
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:3908
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:3540
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    - System Location Discovery: System Language Discovery
    PID:6024
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:2440
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:2356
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:240
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:4648
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    - Kills process with taskkill
    PID:2448
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:1384
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:5392
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:360
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    - System Location Discovery: System Language Discovery
    PID:2384
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:700
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:3648
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:5340
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:4712
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:5112
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:4544
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:588
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:4612
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:1468
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:4024
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:2552
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:1592
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    - System Location Discovery: System Language Discovery
    PID:2540
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    - System Location Discovery: System Language Discovery
    PID:3364
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:5552
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:3824
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:1472
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:4588
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:3212
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:3184
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:2652
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    - System Location Discovery: System Language Discovery
    PID:4688
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:3232
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:1964
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    - System Location Discovery: System Language Discovery
    PID:5568
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    - System Location Discovery: System Language Discovery
    PID:2912
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:4300
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    - System Location Discovery: System Language Discovery
    PID:1612
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:4512
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:1708
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:5516
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    - System Location Discovery: System Language Discovery
    PID:720
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:1280
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    - System Location Discovery: System Language Discovery
    PID:2484
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    - System Location Discovery: System Language Discovery
    PID:5740
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:2004
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:4392
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:4440
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:3480
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:5992
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:5324
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:1800
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:4932
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:244
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:3416
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:3900
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:4536
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:2260
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:4016
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:1096
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:3044
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:5572
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:2952
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:5508
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    - System Location Discovery: System Language Discovery
    PID:3632
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:5748
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:4428
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:2140
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    - System Location Discovery: System Language Discovery
    PID:4284
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:5332
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:460
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    - Kills process with taskkill
    PID:1812
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    - System Location Discovery: System Language Discovery
    PID:3376
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:1872
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:5860
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    - System Location Discovery: System Language Discovery
    PID:5084
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:5564
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:3364
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:2304
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    - System Location Discovery: System Language Discovery
    PID:5652
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:5744
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:5864
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:2944
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:4280
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    - System Location Discovery: System Language Discovery
    PID:3984
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:4688
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:2604
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:2228
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:1108
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:1788
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:820
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    - System Location Discovery: System Language Discovery
    PID:672
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:3268
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:4028
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:3704
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:2808
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:1756
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:3568
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:4584
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:4416
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:2444
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:3908
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    - System Location Discovery: System Language Discovery
    PID:1776
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:2452
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:3312
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:468
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:3900
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:2892
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:3512
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    - System Location Discovery: System Language Discovery
    PID:4244
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:592
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:3200
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:3548
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:4380
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:2020
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:360
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:2448
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:4720
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:4272
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:5956
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:2564
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    - System Location Discovery: System Language Discovery
    PID:4612
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:3648
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:1812
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:2376
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:2684
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:4460
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:4808
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:5564
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:3020
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:2472
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:3288
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:2840
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    - System Location Discovery: System Language Discovery
    PID:5520
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    - System Location Discovery: System Language Discovery
    PID:4448
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:5744
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:4280
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:5652
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    - System Location Discovery: System Language Discovery
    PID:3836
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:3232
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:1600
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:2152
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    - System Location Discovery: System Language Discovery
    PID:1488
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:2228
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:5544
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:3704
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:3576
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:3540
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:2084
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:4488
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:720
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:1892
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:540
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:4324
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:1756
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    - System Location Discovery: System Language Discovery
    PID:5324
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:1800
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:1328
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:2452
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:2936
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:1616
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:3264
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:4876
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:700
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:4696
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:1804
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    - System Location Discovery: System Language Discovery
    PID:4244
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:4508
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:6028
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:3044
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:360
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    - System Location Discovery: System Language Discovery
    PID:1696
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:544
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:2668
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:3904
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:4196
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:3488
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:460
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:2376
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:1872
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:480
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:1048
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:2780
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:1456
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    - System Location Discovery: System Language Discovery
    PID:2304
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:5412
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:2896
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:1592
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:1636
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:5744
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:2712
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:3344
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:2580
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:3784
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:2912
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:5428
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:2784
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:4128
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    - System Location Discovery: System Language Discovery
    PID:5916
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:2484
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    - System Location Discovery: System Language Discovery
    PID:5240
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:5068
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:2496
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:4340
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:1432
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:4540
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:3780
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:4644
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    - System Location Discovery: System Language Discovery
    PID:2828
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    - System Location Discovery: System Language Discovery
    PID:3512
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:1976
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    - System Location Discovery: System Language Discovery
    PID:1616
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:3752
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:928
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    - System Location Discovery: System Language Discovery
    PID:5572
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:2020
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:3572
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    - System Location Discovery: System Language Discovery
    PID:5052
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    - Kills process with taskkill
    PID:4264
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:3044
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:2824
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:4612
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:2724
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:2564
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:2460
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:3028
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:5920
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:4544
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:4196
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:3724
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:4640
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    - Kills process with taskkill
    PID:5884
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:2736
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:4828
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    - System Location Discovery: System Language Discovery
    PID:5500
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:6052
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:1208
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:4448
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:3652
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    - System Location Discovery: System Language Discovery
    PID:2268
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:2116
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:5520
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    - System Location Discovery: System Language Discovery
    PID:1612
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:3916
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:3076
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:5776
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:3036
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:3836
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:4488
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:2912
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:5516
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    - System Location Discovery: System Language Discovery
    PID:4128
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:4848
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:5068
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:5384
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:3980
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:2324
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:3496
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:2692
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:4940
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    - System Location Discovery: System Language Discovery
    PID:4652
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:5392
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:5008
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:3780
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    - System Location Discovery: System Language Discovery
    PID:5492
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:1976
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:3252
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:2260
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:352
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    - Kills process with taskkill
    PID:5560
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:360
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:1132
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:928
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:5112
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:1812
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:2768
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:1224
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:588
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:6048
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:5100
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:5332
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:3488
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:3004
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:3184
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:1872
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:4196
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:5620
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:1208
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:3124
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:3624
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:428
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    - Kills process with taskkill
    PID:3528
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    - System Location Discovery: System Language Discovery
    PID:3412
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:2612
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:3568
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:2228
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:4028
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    - System Location Discovery: System Language Discovery
    PID:2304
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:5588
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:3432
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:2748
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:1940
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:2084
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:1500
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:472
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:3576
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:6024
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:4644
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:1272
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:1540
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:2440
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:3900
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:6124
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:4996
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    - Kills process with taskkill
    PID:5928
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:1384
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:4676
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:1916
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:3220
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:2452
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:5340
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:4768
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:5688
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    - System Location Discovery: System Language Discovery
    PID:5004
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:4664
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:2316
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:3648
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:3288
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:5160
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:5552
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    - System Location Discovery: System Language Discovery
    PID:1596
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:2384
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:4396
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:2336
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    - Kills process with taskkill
    PID:3256
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:3020
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:4008
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:3536
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:3176
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:2944
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:1308
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:1624
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:2072
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:3720
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:5944
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:5772
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:1964
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:1572
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:3984
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:4884
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:784
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:2216
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:1908
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:4560
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:3908
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:5960
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:4848
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:2624
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    - Kills process with taskkill
    PID:1500
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:1984
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:2444
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:5828
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:2356
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:3200
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:3976
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:472
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:996
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    - Kills process with taskkill
    PID:1412
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:4872
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:3752
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:4940
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:5824
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:2452
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:5340
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:5492
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:852
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:4508
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:4676
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:4716
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:4840
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:5764
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    - System Location Discovery: System Language Discovery
    PID:5592
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:2104
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:5864
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:5160
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:4396
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:5956
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:3364
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:1528
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:1308
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:3184
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:4228
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:4424
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:5204
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:2040
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:3196
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:4460
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:2740
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:5772
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:4724
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:4816
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:5776
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    - Kills process with taskkill
    PID:2580
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:672
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:4564
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:1756
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:4776
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:5064
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:3836
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:5960
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:2028
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:1608
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:1540
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:5388
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:4536
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:468
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:2444
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:4920
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:6024
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    - Kills process with taskkill
    PID:472
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:620
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:2936
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:1468
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:3752
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:1804
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:1384
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:3220
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:1588
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:5948
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:2372
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:4612
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:2000
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:588
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:2316
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:5072
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:544
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:4588
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:2104
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:2472
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:3004
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:1528
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:4300
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:2780
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:4808
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    - Kills process with taskkill
    PID:1208
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    - Kills process with taskkill
    PID:3280
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:2188
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:2116
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:5744
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:4728
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:2304
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:2604
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    - Kills process with taskkill
    PID:1964
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:820
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:4688
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:2864
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:5184
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    - Kills process with taskkill
    PID:2496
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:3808
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:4884
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:3696
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:1756
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    - Kills process with taskkill
    PID:5064
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:2484
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:4700
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:4164
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:3056
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:1432
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:3076
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:720
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:2140
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:5444
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:6024
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:1412
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:4340
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:1464
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:4372
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:2724
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:4720
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:3840
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:360
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:4264
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:5084
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:5948
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:3648
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:4612
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:4716
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:5564
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:4980
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:3364
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:2736
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:5988
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:5652
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:5764
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:4788
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:4436
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:3176
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:2780
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:2840
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    - Kills process with taskkill
    PID:3256
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:5544
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:1788
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:3984
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:3468
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:4816
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:5520
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:5740
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:3908
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:4584
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:4524
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:4440
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    - Kills process with taskkill
    PID:1908
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:4160
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:5324
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:3808
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:5384
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:436
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:4392
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:1884
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:2952
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:5220
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:1776
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:3900
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:2444
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:2656
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:5064
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:1756
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:4920
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    - Kills process with taskkill
    PID:2680
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:540
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:1696
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:4244
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:5076
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:4340
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:352
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:2936
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:2828
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:6032
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:3844
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:5004
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:3724
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:5728
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:2372
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:3184
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:5864
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:5100
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:2456
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:4124
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:3420
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:5412
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:5528
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:6044
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:1628
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:5764
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:5256
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:2784
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:2740
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:1708
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:2920
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:1636
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:2604
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:5288
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:4944
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:5428
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:5316
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:5584
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:4520
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:2080
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:5336
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:5368
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:704
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:4392
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:5392
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:1540
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:4536
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:4160
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:4016
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:5344
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:4748
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:4932
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:2536
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:3416
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:5052
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:4672
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:4996
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:4116
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:3512
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:620
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:2260
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:2692
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:5508
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:1916
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:2460
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:2660
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:2140
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:3844
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:3016
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:1248
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:2736
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    - Kills process with taskkill
    PID:5884
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:3160
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:5100
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:3852
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:5736
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:3488
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:5592
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:4640
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:3280
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:5528
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:1308
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:2672
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:1208
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:1964
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:3036
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:1572
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:2920
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:2152
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:3704
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:6040
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:4884
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:5316
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:4908
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:4560
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:2748
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:2912
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:3532
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:5792
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:3312
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:612
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:1688
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:4416
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:1540
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:4108
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:4540
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:1128
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    - Kills process with taskkill
    PID:4624
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:3056
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:4876
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:3904
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:1384
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:1464
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:3052
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:4116
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:1132
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:620
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:2684
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:5332
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:4840
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:3624
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:3880
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:5996
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:3236
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:2000
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:4008
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:5552
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:5156
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:5884
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:2072
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:5620
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:3852
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:5412
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:1200
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:1788
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:5256
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:3652
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:5772
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:3568
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:3088
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:4512
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:1880
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:1612
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:1984
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:436
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:248
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:4440
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:3688
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:5828
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:3496
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:1892
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:3000
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:2448
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:6020
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:5384
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:5240
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:1328
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:5344
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:5836
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:4852
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:5220
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:4104
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:5052
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:2452
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:5212
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:5680
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:4380
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:200
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:4328
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:3812
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    - Kills process with taskkill
    PID:3052
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:4376
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:2876
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:4756
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:2308
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:5656
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:1872
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:5956
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:2456
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    - Kills process with taskkill
    PID:4448
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:5860
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:5592
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:5884
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:5904
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:1636
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:4460
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:4228
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:4356
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:5412
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:1936
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:2040
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:3980
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:4688
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:2280
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:2228
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:3652
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:696
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:5316
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:3088
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:5324
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:5584
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:1756
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:2084
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:1432
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:3200
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:2596
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:3548
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:2748
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    - Kills process with taskkill
    PID:3188
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:1892
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:3044
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:3808
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:612
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:3272
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:1616
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:2324
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:2768
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:4244
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:2020
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:3352
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:540
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:3748
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:3252
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:5160
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:4240
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:4632
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:3752
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:5680
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:1596
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:4612
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:3880
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:3184
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    - Kills process with taskkill
    PID:4408
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:1588
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:5864
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:4756
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:5280
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:4744
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:844
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:2612
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:2104
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:3472
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:4448
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:5764
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:1936
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:2496
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:5944
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:3704
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:1528
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:5136
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:3652
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:1996
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:3380
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:5500
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:4848
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:2440
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:468
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:1756
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:3088
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:5360
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:5556
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:3096
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:3416
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:6008
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:3188
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:3272
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:3976
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:2700
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:3696
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:5916
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:3308
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:852
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:3252
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:1804
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:1812
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:756
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:2452
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:4956
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:4372
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:2260
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:5328
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:1396
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:5652
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:6052
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:5072
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:3236
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:4676
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:6048
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:928
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:2004
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:2896
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:4428
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:4424
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:2740
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:6140
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:4468
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:5528
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:2304
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:3412
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:2496
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:4400
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:2908
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:5516
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:4884
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:3720
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:4536
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:3652
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    - Kills process with taskkill
    PID:5500
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:720
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:1540
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:4520
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:3916
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:1984
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:244
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:4696
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:5800
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:2824
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:1500
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:3576
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:4920
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:5492
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:4236
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:3748
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:5920
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:2700
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    - Kills process with taskkill
    PID:5212
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:480
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:4104
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:4264
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:360
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:2876
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:3812
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:2360
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:2452
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:6096
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:4612
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:4632
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:3724
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:1284
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:2456
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:3540
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:4788
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:2672
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:1940
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:3472
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:5860
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:2256
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:5904
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:1308
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:428
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:3988
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:5132
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:4836
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:5184
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:3412
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:4584
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:1936
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:2864
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:2644
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:2356
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:4528
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:5500
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:3780
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:684
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:4700
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:2952
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    - Kills process with taskkill
    PID:3088
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:1776
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:5572
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:6008
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:1892
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:472
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:3188
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:1608
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:916
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:5492
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:952
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:5560
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:1328
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:2684
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:2128
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    - Kills process with taskkill
    PID:1796
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:620
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:2924
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:4252
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:360
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:3256
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:2032
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:3632
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:5072
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:5084
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    - Kills process with taskkill
    PID:5744
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:3488
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:3184
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:2424
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:4808
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:4300
  - - C:\Windows\System32\Conhost.exe
      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
      4⤵
      PID:928
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM StartMenuExperienceHost.exe >nul 2>&1
    3⤵
    PID:5812
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM ShellExperienceHost.exe >nul 2>&1
    3⤵
    PID:1772
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM SearchHost.exe >nul 2>&1
    3⤵
    PID:3468
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM TextInputHost.exe >nul 2>&1
    3⤵
    PID:4448
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /F /IM explorer.exe >nul 2>&1
    3⤵
    PID:428

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads