94e3b68cecdecc042b9784d4ec12be627cf5cb158f2bf991713e1a7e4400936a

Analysis

max time kernel
160s
max time network
171s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
02/12/2022, 17:53

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

94e3b68cecdecc042b9784d4ec12be627cf5cb158f2bf991713e1a7e4400936a.exe
Size

26KB
MD5

d883224409213036f8c0694d4df157cb
SHA1

82237e1de2a41b0d01e1091ddc352204a2965467
SHA256

94e3b68cecdecc042b9784d4ec12be627cf5cb158f2bf991713e1a7e4400936a
SHA512

420bf9bc4ad8e5244257604b5f8b32bd2fdb5520197599807a0c37bb91aa9d177f3a6a77f36d3996fa9ac01347e6b97a82bd605268054d5626ecf5a519ba9176
SSDEEP

768:/VL5jeeDoqEZ74Xug7UnZxfHrQQi7D4O:/VNjeD74b0Zx8QjO

Score

7^/10

Malware Config

Signatures

Checks computer location settings 2 TTPs 1 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-2629973501-4017243118-3254762364-1000\Control Panel\International\Geo\Nation	94e3b68cecdecc042b9784d4ec12be627cf5cb158f2bf991713e1a7e4400936a.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082
Runs net.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3436 wrote to memory of 4376	3436	94e3b68cecdecc042b9784d4ec12be627cf5cb158f2bf991713e1a7e4400936a.exe	80
PID 3436 wrote to memory of 4376	3436	94e3b68cecdecc042b9784d4ec12be627cf5cb158f2bf991713e1a7e4400936a.exe	80
PID 3436 wrote to memory of 4376	3436	94e3b68cecdecc042b9784d4ec12be627cf5cb158f2bf991713e1a7e4400936a.exe	80
PID 4376 wrote to memory of 1744	4376	cmd.exe	83
PID 4376 wrote to memory of 1744	4376	cmd.exe	83
PID 4376 wrote to memory of 1744	4376	cmd.exe	83
PID 1744 wrote to memory of 948	1744	net.exe	84
PID 1744 wrote to memory of 948	1744	net.exe	84
PID 1744 wrote to memory of 948	1744	net.exe	84
PID 4376 wrote to memory of 312	4376	cmd.exe	85
PID 4376 wrote to memory of 312	4376	cmd.exe	85
PID 4376 wrote to memory of 312	4376	cmd.exe	85
PID 312 wrote to memory of 1388	312	net.exe	86
PID 312 wrote to memory of 1388	312	net.exe	86
PID 312 wrote to memory of 1388	312	net.exe	86
PID 4376 wrote to memory of 2280	4376	cmd.exe	87
PID 4376 wrote to memory of 2280	4376	cmd.exe	87
PID 4376 wrote to memory of 2280	4376	cmd.exe	87
PID 2280 wrote to memory of 1956	2280	net.exe	88
PID 2280 wrote to memory of 1956	2280	net.exe	88
PID 2280 wrote to memory of 1956	2280	net.exe	88
PID 4376 wrote to memory of 1548	4376	cmd.exe	89
PID 4376 wrote to memory of 1548	4376	cmd.exe	89
PID 4376 wrote to memory of 1548	4376	cmd.exe	89
PID 1548 wrote to memory of 1496	1548	net.exe	90
PID 1548 wrote to memory of 1496	1548	net.exe	90
PID 1548 wrote to memory of 1496	1548	net.exe	90
PID 4376 wrote to memory of 2660	4376	cmd.exe	91
PID 4376 wrote to memory of 2660	4376	cmd.exe	91
PID 4376 wrote to memory of 2660	4376	cmd.exe	91
PID 2660 wrote to memory of 3288	2660	net.exe	92
PID 2660 wrote to memory of 3288	2660	net.exe	92
PID 2660 wrote to memory of 3288	2660	net.exe	92
PID 4376 wrote to memory of 1396	4376	cmd.exe	93
PID 4376 wrote to memory of 1396	4376	cmd.exe	93
PID 4376 wrote to memory of 1396	4376	cmd.exe	93
PID 1396 wrote to memory of 1732	1396	net.exe	94
PID 1396 wrote to memory of 1732	1396	net.exe	94
PID 1396 wrote to memory of 1732	1396	net.exe	94
PID 4376 wrote to memory of 3392	4376	cmd.exe	95
PID 4376 wrote to memory of 3392	4376	cmd.exe	95
PID 4376 wrote to memory of 3392	4376	cmd.exe	95
PID 3392 wrote to memory of 2472	3392	net.exe	96
PID 3392 wrote to memory of 2472	3392	net.exe	96
PID 3392 wrote to memory of 2472	3392	net.exe	96
PID 4376 wrote to memory of 1564	4376	cmd.exe	97
PID 4376 wrote to memory of 1564	4376	cmd.exe	97
PID 4376 wrote to memory of 1564	4376	cmd.exe	97
PID 1564 wrote to memory of 1048	1564	net.exe	98
PID 1564 wrote to memory of 1048	1564	net.exe	98
PID 1564 wrote to memory of 1048	1564	net.exe	98
PID 4376 wrote to memory of 1232	4376	cmd.exe	99
PID 4376 wrote to memory of 1232	4376	cmd.exe	99
PID 4376 wrote to memory of 1232	4376	cmd.exe	99
PID 1232 wrote to memory of 2876	1232	net.exe	100
PID 1232 wrote to memory of 2876	1232	net.exe	100
PID 1232 wrote to memory of 2876	1232	net.exe	100
PID 4376 wrote to memory of 2860	4376	cmd.exe	101
PID 4376 wrote to memory of 2860	4376	cmd.exe	101
PID 4376 wrote to memory of 2860	4376	cmd.exe	101
PID 2860 wrote to memory of 4416	2860	net.exe	102
PID 2860 wrote to memory of 4416	2860	net.exe	102
PID 2860 wrote to memory of 4416	2860	net.exe	102
PID 4376 wrote to memory of 3136	4376	cmd.exe	103

C:\Users\Admin\AppData\Local\Temp\94e3b68cecdecc042b9784d4ec12be627cf5cb158f2bf991713e1a7e4400936a.exe
"C:\Users\Admin\AppData\Local\Temp\94e3b68cecdecc042b9784d4ec12be627cf5cb158f2bf991713e1a7e4400936a.exe"
1⤵
- Checks computer location settings
- Suspicious use of WriteProcessMemory
PID:3436
- C:\Windows\SysWOW64\cmd.exe
  C:\Windows\system32\cmd.exe /c ""C:\Users\Admin\AppData\Local\Temp\CC9C.tmp\Crash.bat" "
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:4376
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:1744
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:948
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:312
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1388
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:2280
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1956
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:1548
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1496
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:2660
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3288
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:1396
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1732
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:3392
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2472
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:1564
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1048
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:1232
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2876
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:2860
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4416
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3136
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2136
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1556
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3692
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:112
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:220
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3148
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:404
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:724
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4664
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4692
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1040
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4908
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1392
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3164
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3908
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1156
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2960
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3868
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3448
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2116
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1540
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:5072
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2208
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2532
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1576
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3756
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3732
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1976
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4140
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2244
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2752
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3516
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2852
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2328
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4536
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3184
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1480
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4304
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4024
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1632
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1148
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3712
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:5076
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4364
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3228
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4504
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4488
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2524
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:5100
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3916
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:944
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3568
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4892
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4500
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1052
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1756
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4808
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4452
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3084
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4728
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3260
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4228
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4116
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2564
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3768
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4860
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4840
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4608
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3672
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3612
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4348
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4400
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2168
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:432
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3964
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4056
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2676
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4740
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1736
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1412
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2084
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1744
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2044
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:5112
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1908
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4360
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1828
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4276
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1548
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1340
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4744
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4540
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1732
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2376
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1628
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4020
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4812
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1048
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3708
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2380
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4144
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2964
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3520
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2860
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2396
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3404
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1180
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3892
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3692
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:320
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2364
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2224
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4396
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4780
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4588
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3856
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4784
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2260
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:968
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1584
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2132
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3276
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:5092
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4848
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1276
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4340
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3544
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4100
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2960
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:696
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:5016
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4948
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1140
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1224
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2532
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:5108
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4484
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1576
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3756
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1700
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3900
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4220
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2236
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4700
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3516
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2752
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1560
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4200
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4596
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3184
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4536
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2512
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4084
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2404
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3592
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2504
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4640
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1108
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2936
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3940
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3736
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3228
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4864
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4488
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2088
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:5100
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4552
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1020
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4104
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4500
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4712
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2632
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4736
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4808
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1656
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3084
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4984
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2492
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3500
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4116
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:828
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3768
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4636
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4840
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2360
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4344
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4204
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2516
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3896
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:432
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3968
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3964
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4740
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2676
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2032
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1736
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:880
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4368
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1352
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2280
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4816
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2792
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2612
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2664
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1496
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4076
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4744
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4016
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1448
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3944
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4308
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4936
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1256
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4324
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1564
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4092
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:748
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1816
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2576
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3136
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4300
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1176
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:176
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:220
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:628
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3432
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:212
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2256
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4148
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4464
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4420
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4664
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2072
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4776
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4592
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3164
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2152
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2672
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1428
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3504
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1156
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1112
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3924
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:644
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1904
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1056
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4088
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3168
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1540
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2692
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2208
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2532
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2096
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1576
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1700
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3756
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4220
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3900
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4900
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4700
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2752
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3516
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4320
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4200
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3184
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4596
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1864
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2272
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1080
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1480
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4024
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1400
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1148
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3280
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3440
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4364
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1592
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3176
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4124
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4628
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1692
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3600
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1876
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4732
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2176
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4820
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3156
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2216
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2572
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:64
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2956
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3300
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3260
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4228
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2564
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3036
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2556
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:828
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4608
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4636
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3672
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2360
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1488
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2516
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:432
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3896
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3956
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3636
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3492
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1792
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1972
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1416
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1744
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4368
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1088
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2280
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2792
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4816
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2664
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2612
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:884
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4076
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1016
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4016
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4020
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1732
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1304
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1628
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2380
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2508
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2964
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3708
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2860
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4144
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3340
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1652
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4928
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2396
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:224
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:176
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:5068
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:216
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3584
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2364
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:404
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4148
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4436
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4756
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4908
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3380
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3276
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2016
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4848
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2132
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2312
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:5092
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:384
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4428
    - - C:\Windows\SysWOW64\net1.exe
        
        C:\Windows\system32\net1 send * WORKGROUP ENABLED
        5⤵
        
        PID:1896
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1880
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3544
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4948
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3172
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1224
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:5016
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3528
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4968
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3540
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1036
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3732
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2428
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2028
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3100
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1836
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1948
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1476
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4888
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2852
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4132
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3000
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2328
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1440
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3184
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4536
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1864
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1480
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1080
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1400
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4024
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3280
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1148
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4364
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3440
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3176
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1592
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:780
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4124
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1892
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4216
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4560
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1052
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3512
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1608
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2632
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1920
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:5104
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2812
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3084
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1376
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4228
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3260
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3036
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2564
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:828
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2556
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4636
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4608
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2360
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4344
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4012
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2568
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:5032
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2520
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1696
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3956
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3704
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:5040
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:5112
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1972
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1380
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2084
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1472
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2044
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4620
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3008
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3288
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2768
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1396
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1548
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1068
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4016
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3688
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:736
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4936
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4048
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4812
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:668
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4112
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3632
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1816
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:240
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2136
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1556
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1176
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2356
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:208
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3148
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:5068
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:212
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3584
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4464
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4396
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4420
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4436
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2796
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4932
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4592
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4844
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3452
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2132
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:484
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3908
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4340
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:384
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3924
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3544
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:644
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4948
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4088
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4752
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2692
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1140
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2532
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2764
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1576
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3196
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3756
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2244
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2324
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3900
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1404
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2236
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1356
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1032
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4320
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1560
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4596
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3092
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2272
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1864
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4536
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1080
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1480
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4024
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1400
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1148
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3280
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:5076
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3440
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4504
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1592
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:860
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4628
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4552
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1892
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4104
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1020
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2144
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1608
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2216
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1920
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2812
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:5104
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3300
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1376
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3260
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4228
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4116
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2564
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2556
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:828
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4608
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4636
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4344
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2360
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4204
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:432
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4188
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1360
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3980
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1696
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4740
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3704
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2708
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1972
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2084
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1380
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1388
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2044
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3008
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4620
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2768
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3288
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1548
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1396
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1568
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4744
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:736
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3688
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1256
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1124
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3708
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4324
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3332
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3632
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2576
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4144
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4300
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3340
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:112
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1176
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3692
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:628
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2264
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3856
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:724
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2364
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4588
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4664
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4776
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2072
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:968
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3164
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1392
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2152
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4136
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3504
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3868
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1156
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:696
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:60
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2960
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1056
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1004
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3448
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1136
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1224
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1036
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:5108
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4288
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3540
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1976
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2428
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4528
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2028
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4900
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1836
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2748
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4700
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4512
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1032
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1632
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3000
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4084
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3092
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1264
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2512
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1952
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1480
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3948
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2504
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2024
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3280
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3940
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3600
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4504
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:780
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:860
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4216
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1692
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4560
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4104
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1608
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2144
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1920
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2216
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:5104
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2812
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3084
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:5096
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2952
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3260
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2564
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4116
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:828
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2556
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4636
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4608
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:5028
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3612
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:432
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4204
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1360
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4188
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3636
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1696
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3704
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4740
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1972
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2708
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1380
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2084
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1472
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1388
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4816
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4620
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2612
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3288
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1396
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1068
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4744
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1568
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3688
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:736
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1124
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1256
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2380
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3708
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3632
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3332
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4144
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2576
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3340
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4300
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4928
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1176
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:176
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:628
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3856
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2264
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2364
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:724
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4420
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4664
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2072
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4776
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4592
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:968
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2152
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2132
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:5092
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3908
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1112
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4428
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4088
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3204
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:424
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1136
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3528
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1944
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2096
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3096
    - - C:\Windows\SysWOW64\net1.exe
        
        C:\Windows\system32\net1 send * WORKGROUP ENABLED
        5⤵
        
        PID:2244
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3756
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2244
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4220
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2752
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1836
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4960
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4304
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1356
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3184
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3516
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3952
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4496
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4596
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3712
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1440
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1864
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1264
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1480
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1952
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4024
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2504
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3312
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2024
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1884
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2816
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2928
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4392
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3568
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3916
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4820
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1052
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1756
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2176
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4736
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1608
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1920
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2572
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1656
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:856
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2956
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4860
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4228
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2952
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:5008
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3260
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4992
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4720
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2548
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2168
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2360
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4400
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4012
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4344
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3896
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1360
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3636
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4188
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3704
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1696
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1744
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1972
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1380
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2708
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1472
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2084
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4816
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2768
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2376
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1496
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1448
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1016
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1236
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4020
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2508
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4884
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3468
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4324
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1256
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4092
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4112
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2860
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3404
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1652
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2576
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4928
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4300
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:176
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1176
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:216
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4052
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3584
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4588
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1584
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3380
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2796
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4692
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4868
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:484
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3452
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4224
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2132
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4100
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2312
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3544
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:60
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4752
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3204
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1136
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:424
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2208
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1944
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3732
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3096
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3756
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2324
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4900
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2236
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1476
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4888
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3516
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3184
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4496
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3592
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3712
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4536
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4640
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2404
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4232
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1400
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4316
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1148
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4644
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2984
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3420
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2088
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2816
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4732
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3568
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4216
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4820
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1756
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1052
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4736
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2176
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1920
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1608
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1656
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2572
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1672
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2956
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1376
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4228
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2040
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:5008
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4992
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3260
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4988
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1488
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2220
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3588
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2568
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1412
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3896
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:312
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3980
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4360
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1792
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4740
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4296
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1088
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1312
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2792
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2280
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:5116
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1908
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4076
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2376
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2768
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1448
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1732
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4744
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1232
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2876
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1564
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1124
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1388
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1256
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4324
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3136
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:320
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2408
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3340
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2576
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1652
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4300
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4928
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2224
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1176
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:628
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4052
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4588
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3584
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3380
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1584
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4932
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4192
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3276
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4776
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3504
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:968
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1276
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:384
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3548
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3908
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3168
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:5016
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1540
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1224
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:612
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3576
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4288
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4708
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1700
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3100
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4528
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3756
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1948
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4512
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1356
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2236
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1032
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3516
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3592
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4496
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4596
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3712
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2404
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4640
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1080
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1400
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1148
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4316
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2984
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3176
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2088
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3420
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1592
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4732
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2200
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4216
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1692
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1756
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4736
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1052
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1920
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4452
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2216
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:856
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3500
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4860
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1840
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:5096
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4840
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:5000
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1624
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4720
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3672
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:2556
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:5028
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4012
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:948
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:432
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3956
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1360
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2776
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4188
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:3656
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1696
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2700
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:4368
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2600
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:1352
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:1956
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:884
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:4620
- - C:\Windows\SysWOW64\net.exe
    net send * WORKGROUP ENABLED
    3⤵
    PID:3392
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 send * WORKGROUP ENABLED
      4⤵
      PID:2768

C:\Windows\SysWOW64\net1.exe
C:\Windows\system32\net1 send * WORKGROUP ENABLED
1⤵
PID:3596

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\CC9C.tmp\Crash.bat

Filesize
1KB

MD5
3850161ecb31ccdd28875b21673d0564

SHA1
abc56fe8f45824b8fe17891e19f860ab92903903

SHA256
5005897fdc11e20c63af9d09c460226665de6bd6c30e0c7814a7f403ce04ddb2

SHA512
a884506be029ce84f1de2d8d2b80f3933eb4e8acfb5247c1e48a0d490519b2139693c7ba4e82d5780865318918faf3ea77434b1e944caab17b616dd273939cb8

Download Submit
memory/3436-198-0x0000000000400000-0x0000000000410000-memory.dmp

Filesize
64KB

Download
memory/3436-132-0x0000000000400000-0x0000000000410000-memory.dmp

Filesize
64KB

Download