Process action type = execution AND target process cmd = * nwscmon.exe* , * fortisslvpndaemon.exe* , * bullguardbhvscanner.exe* , * rawshark.exe* , * fcdblog.exe* , * bullguard.exe* , * adawaredesktop.exe* , * consctlx.exe* , * sastask.exe* , * scanwscs.exe* , * k7tsecurity.exe* , * filwscc.exe* , * littlehook.exe* , * bullguarscanner.exe* , * nvcod.exe* , * ptwatchdog.exe* , * mbamservice.exe* , * unthreat.exe* , * twsscan.exe* , * schmgr.exe* , * escanmon.exe* , * uiwinmgr.exe* , * bgscan.exe* , * forticlient_diagnostic_tool.exe* , * nnf.exe* , * v3sp.exe* , * sdwelcome.exe* , * clamtray.exe* , * nvoy.exe* , * sbpimsvc.exe* , * v3main.exe* , * fcappdb.exe* , * mergecap.exe* , * mwaser.exe* , * bavtray.exe* , * filup.exe* , * v3up.exe* , * avktray.exe* , * msmpeng.exe* , * onlinent.exe* , * avpmapp.exe* , * taskmgr.exe* , * k7fwsrvc.exe* , * clamscan.exe* , * ptsessionagent.exe* , * nissrv.exe* , * v3proxy.exe* , * mbam.exe* , * webcompanion.exe* , * k7tsmngr.exe* , * mcshieldrtm.exe* , * fprottray.exe* , * fortifw.exe* , * procexp64.exe* , * avkwctlx64.exe* , * opssvc.exe* , * superantispyware.exe* , * escanpro.exe* , * nprosec.exe* , * quamgr.exe* , * bullguardupdate.exe* , * avkproxy.exe* , * psuaservice.exe* , * k7pssrvc.exe* , * acs.exe* , * clamwin.exe* , * fortitray.exe* , * k7crvsvc.exe* , * bavupdater.exe* , * certreg.exe* , * fpavserver.exe* , * filmsg.exe* , * k7sysmon.exe* , * econser.exe* , * zlh.exe* , * uiupdatetray.exe* , * fshoster32.exe* , * psview.exe* , * sapissvc.exe* , * quamgr.exe* , * k7rtscan.exe* , * schmgr.exe* , * fsma32.exe* , * zlhh.exe* , * k7fwsrvc.exe* , * twssrv.exe* , * nanoav.exe* , * fpwin.exe* , * useraccountcontrolsettings.exe* , * freshclam.exe* , * wireshark.exe* , * ns.exe* , * coreframeworkhost.exe* , * sbamtray.exe* , * scproxysrv.exe* , * viewtcp.exe* , * sdfssvc.exe* , * fshdll64.exe* , * avkservice.exe* , * nfservice.exe* , * utsvc.exe* , * traysser.exe* , * nvcsvc.exe* , * sdscan.exe* , * ptsvchost.exe* , * k7sysmon.exe* , * procexp.exe* , * mpuxsrv.exe* , * quhlpsvc.exe* , * superdelete.exe* , * guardxservice.exe* , * msascui.exe* , * mcshieldds.exe* , * k7tsmain.exe* , * trigger.exe* , * econceal.exe* , * fsgk32.exe* , * adawareservice.exe* , * mbamscheduler.exe* , * mcs-uninstall.exe* , * fortiesnac.exe* , * k7avscan.exe* , * nbrowser.exe* , * nseupdatesvc.exe* , * guardxkickoff_x64.exe* , * bavhm.exe* , * cistray.exe* , * agentsvc.exe* , * adawaretray.exe* , * av_task.exe* , * njeeves2.exe* , * coreserviceshell.exe* , * k7tsmain.exe* , * uiwatchdog.exe* , * freshclamwrap.exe* , * k7avscan.exe* , * psuamain.exe* , * sdtray.exe* , * gdscan.exe* , * mcshieldccc.exe* , * cmdagent.exe* , * dragon_updater.exe* , * cis.exe* , * forticlient.exe* , * sascore64.exe* , * bav.exe* , * ssupdate64.exe* , * scanner.exe* , * v3svc.exe* , * bavsvc.exe* , * psanhost.exe* , * gdbginx64.exe* , * k7emlpxy.exe* , * gdsc.exe* , * avk.exe* , * text2pcap.exe* , * fssm32.exe* , * userreg.exe* , * iptray.exe* , * emlproxy.exe* , * processhacker.exe* , * k7tsmngr.exe* , * filwscc.exe* , * mpcmdrun.exe* , * k7emlpxy.exe* , * virusutilities.exe* , * k7tsecurity.exe* , * fchelper64.exe* , * k7crvsvc.exe* , * capinfos.exe* , * v3medic.exe* , * fsm32.exe* , * k7pssrvc.exe* , * fmon.exe* , * gdkbfl.exe* , * op_mon.exe* , * vipreui.exe* , * uiseagnt.exe* , * zanda.exe* , * cavwp.exe* , * bdssvc.exe* , * nanosvc.exe* , * mwagent.exe* , * k7rtscan.exe* , * editcap.exe* , * bavwebclient.exe* , * fsorsp.exe* , * scsecsvc.exe* , * fortiproxy.exe* , * configsecuritypolicy.exe* , * trayicos.exe* , * sbamsvc.exe* , * cyserver.exe* AND target process name = taskkill.exe AND process execution signature = Signed AND process execution signer = Microsoft Corporation Host host os = windows