d4e56bfa3f9a4444ed4e994a35ce0b2b7b52465bdfa258f9f97bee20c3c77f28

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
03/06/2024, 12:07

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

dont run this.bat
Size

682B
MD5

b883fd4b6d20b823d4bfe33fd6443695
SHA1

c2b4878ed094f3eb67d83ceef13ac6523b91e986
SHA256

d4e56bfa3f9a4444ed4e994a35ce0b2b7b52465bdfa258f9f97bee20c3c77f28
SHA512

471e5c1f42ba0da4117d65c666b105c1565b7749a9bc9a6713fcea32221aa7213065210250830878a845e1cb231ee9e2c87ae06cf82ed4239aaab6c770c788f6

Score

1^/10

Malware Config

Signatures

Delays execution with timeout.exe 64 IoCs

evasion

pid	Process
1972	timeout.exe
2940	timeout.exe
3008	timeout.exe
7152	timeout.exe
2836	timeout.exe
3640	timeout.exe
4916	timeout.exe
2992	timeout.exe
5684	timeout.exe
5824	timeout.exe
5400	timeout.exe
4388	timeout.exe
5576	timeout.exe
7024	timeout.exe
1728	timeout.exe
1344	timeout.exe
3236	timeout.exe
5044	timeout.exe
6600	timeout.exe
6980	timeout.exe
1856	timeout.exe
2856	timeout.exe
4196	timeout.exe
6112	timeout.exe
7056	timeout.exe
3044	timeout.exe
3928	timeout.exe
3640	timeout.exe
5180	timeout.exe
6016	timeout.exe
5712	timeout.exe
6280	timeout.exe
5964	timeout.exe
1012	timeout.exe
3544	timeout.exe
4528	timeout.exe
5920	timeout.exe
4028	timeout.exe
5756	timeout.exe
6444	timeout.exe
2756	timeout.exe
1508	timeout.exe
4884	timeout.exe
5180	timeout.exe
4228	timeout.exe
5608	timeout.exe
1704	timeout.exe
2784	timeout.exe
3708	timeout.exe
4292	timeout.exe
2920	timeout.exe
5792	timeout.exe
2412	timeout.exe
1688	timeout.exe
3096	timeout.exe
5240	timeout.exe
4960	timeout.exe
2432	timeout.exe
2692	timeout.exe
4548	timeout.exe
4580	timeout.exe
4644	timeout.exe
6956	timeout.exe
2548	timeout.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1696 wrote to memory of 1624	1696	cmd.exe	29
PID 1696 wrote to memory of 1624	1696	cmd.exe	29
PID 1696 wrote to memory of 1624	1696	cmd.exe	29
PID 1696 wrote to memory of 1048	1696	cmd.exe	30
PID 1696 wrote to memory of 1048	1696	cmd.exe	30
PID 1696 wrote to memory of 1048	1696	cmd.exe	30
PID 1696 wrote to memory of 2228	1696	cmd.exe	31
PID 1696 wrote to memory of 2228	1696	cmd.exe	31
PID 1696 wrote to memory of 2228	1696	cmd.exe	31
PID 1696 wrote to memory of 2484	1696	cmd.exe	33
PID 1696 wrote to memory of 2484	1696	cmd.exe	33
PID 1696 wrote to memory of 2484	1696	cmd.exe	33
PID 1696 wrote to memory of 2456	1696	cmd.exe	34
PID 1696 wrote to memory of 2456	1696	cmd.exe	34
PID 1696 wrote to memory of 2456	1696	cmd.exe	34
PID 1696 wrote to memory of 2640	1696	cmd.exe	36
PID 1696 wrote to memory of 2640	1696	cmd.exe	36
PID 1696 wrote to memory of 2640	1696	cmd.exe	36
PID 1696 wrote to memory of 2620	1696	cmd.exe	37
PID 1696 wrote to memory of 2620	1696	cmd.exe	37
PID 1696 wrote to memory of 2620	1696	cmd.exe	37
PID 1696 wrote to memory of 2716	1696	cmd.exe	39
PID 1696 wrote to memory of 2716	1696	cmd.exe	39
PID 1696 wrote to memory of 2716	1696	cmd.exe	39
PID 1696 wrote to memory of 2720	1696	cmd.exe	40
PID 1696 wrote to memory of 2720	1696	cmd.exe	40
PID 1696 wrote to memory of 2720	1696	cmd.exe	40
PID 1696 wrote to memory of 2932	1696	cmd.exe	42
PID 1696 wrote to memory of 2932	1696	cmd.exe	42
PID 1696 wrote to memory of 2932	1696	cmd.exe	42
PID 1696 wrote to memory of 2920	1696	cmd.exe	43
PID 1696 wrote to memory of 2920	1696	cmd.exe	43
PID 1696 wrote to memory of 2920	1696	cmd.exe	43
PID 1696 wrote to memory of 2520	1696	cmd.exe	45
PID 1696 wrote to memory of 2520	1696	cmd.exe	45
PID 1696 wrote to memory of 2520	1696	cmd.exe	45
PID 1696 wrote to memory of 2016	1696	cmd.exe	46
PID 1696 wrote to memory of 2016	1696	cmd.exe	46
PID 1696 wrote to memory of 2016	1696	cmd.exe	46
PID 1696 wrote to memory of 2032	1696	cmd.exe	48
PID 1696 wrote to memory of 2032	1696	cmd.exe	48
PID 1696 wrote to memory of 2032	1696	cmd.exe	48
PID 1696 wrote to memory of 2548	1696	cmd.exe	49
PID 1696 wrote to memory of 2548	1696	cmd.exe	49
PID 1696 wrote to memory of 2548	1696	cmd.exe	49
PID 1696 wrote to memory of 2872	1696	cmd.exe	51
PID 1696 wrote to memory of 2872	1696	cmd.exe	51
PID 1696 wrote to memory of 2872	1696	cmd.exe	51
PID 1696 wrote to memory of 2756	1696	cmd.exe	52
PID 1696 wrote to memory of 2756	1696	cmd.exe	52
PID 1696 wrote to memory of 2756	1696	cmd.exe	52
PID 1696 wrote to memory of 2684	1696	cmd.exe	54
PID 1696 wrote to memory of 2684	1696	cmd.exe	54
PID 1696 wrote to memory of 2684	1696	cmd.exe	54
PID 1696 wrote to memory of 2624	1696	cmd.exe	55
PID 1696 wrote to memory of 2624	1696	cmd.exe	55
PID 1696 wrote to memory of 2624	1696	cmd.exe	55
PID 1696 wrote to memory of 2516	1696	cmd.exe	57
PID 1696 wrote to memory of 2516	1696	cmd.exe	57
PID 1696 wrote to memory of 2516	1696	cmd.exe	57
PID 1696 wrote to memory of 2524	1696	cmd.exe	58
PID 1696 wrote to memory of 2524	1696	cmd.exe	58
PID 1696 wrote to memory of 2524	1696	cmd.exe	58
PID 1696 wrote to memory of 2584	1696	cmd.exe	60

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\dont run this.bat"
1⤵
- Suspicious use of WriteProcessMemory
PID:1696
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:1624
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:1048
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:2228
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:2484
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:2456
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:2640
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:2620
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:2716
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:2720
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:2932
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:2920
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:2520
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:2016
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:2032
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:2548
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:2872
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:2756
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:2684
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:2624
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:2516
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:2524
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:2584
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:2436
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:3036
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:2044
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:3024
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:1856
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:2848
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:2856
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:2880
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:2876
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:2976
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:2992
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:1764
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:560
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:1924
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:1704
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:1980
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:1308
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:1872
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:2304
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:1444
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:640
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:2400
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:2768
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:2688
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:2784
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:600
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:1816
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:1288
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:1296
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:1240
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:628
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:1772
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:1972
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:2100
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:2244
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:596
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:2940
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:2232
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:2116
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:2948
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:1728
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:1008
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:696
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:1488
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:1104
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:1392
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:2608
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:1544
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:1012
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:2472
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:2836
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:2356
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:2376
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:1348
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:1556
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:1932
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:1644
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:884
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:1876
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:344
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:3044
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:964
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:1508
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:2036
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:1028
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:2924
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:1768
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:828
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:2292
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:2372
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:2412
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:896
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:2040
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:2828
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:3048
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:1600
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:1572
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:2408
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:2236
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:2252
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:1804
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:2656
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:2920
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:2548
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:2432
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:2532
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:2416
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:1676
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:1856
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:2876
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:3008
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:292
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:1628
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:1408
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:640
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:2784
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:1744
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:2068
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:2076
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:2240
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:2940
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:1728
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:1344
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:2312
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:448
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:860
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:2376
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:1556
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:1636
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:304
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:308
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:1152
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:1508
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:1768
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:1688
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:1748
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:3040
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:2832
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:2236
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:2920
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:2756
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:2844
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:2284
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:2768
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:640
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:2076
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:2692
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:1968
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:2196
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:824
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:308
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:1688
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:3028
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:2432
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:1524
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:696
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:2692
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:308
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:3040
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:2980
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:2992
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:3088
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:3096
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:3120
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:3128
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:3152
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:3160
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:3184
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:3192
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:3216
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:3224
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:3248
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:3256
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:3280
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:3288
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:3312
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:3320
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:3344
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:3352
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:3376
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:3384
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:3408
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:3416
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:3440
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:3448
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:3472
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:3480
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:3504
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:3512
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:3536
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:3544
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:3568
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:3576
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:3600
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:3608
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:3632
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:3640
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:3664
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:3672
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:3696
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:3704
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:3728
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:3736
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:3760
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:3768
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:3792
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:3800
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:3824
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:3832
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:3856
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:3864
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:3888
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:3896
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:3920
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:3928
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:3956
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:3964
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:3988
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:3996
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:4020
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:4028
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:4052
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:4060
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:4084
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:4092
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:3096
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:3132
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:3196
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:3236
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:3300
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:3288
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:3352
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:3388
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:3452
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:3492
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:3556
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:3544
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:3608
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:2024
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:3672
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:3708
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:3772
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:3812
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:3876
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:3864
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:3928
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:3968
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:4032
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:4072
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:3164
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:3132
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:3288
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:3384
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:3588
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:3640
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:3844
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:3812
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:3964
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:2992
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:3484
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:3384
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:3812
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:4064
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:996
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:4064
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:4120
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:4128
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:4152
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:4160
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:4188
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:4196
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:4220
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:4228
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:4252
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:4260
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:4284
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:4292
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:4316
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:4324
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:4348
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:4356
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:4380
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:4388
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:4412
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:4420
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:4444
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:4452
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:4476
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:4484
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:4508
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:4524
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:4540
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:4548
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:4572
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:4580
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:4604
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:4612
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:4636
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:4644
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:4668
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:4676
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:4716
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:4724
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:4748
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:4756
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:4780
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:4788
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:4812
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:4820
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:4844
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:4852
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:4876
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:4884
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:4908
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:4916
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:4940
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:4948
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:4972
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:4980
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:5004
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5012
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:5036
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:5044
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:5068
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5076
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:5100
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5108
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:4140
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:4128
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:4196
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:4232
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:4296
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:4336
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:4400
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:4388
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:4452
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:4488
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:4552
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:4592
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:4656
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:4644
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:4724
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:4760
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:4824
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:4864
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:4928
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:4916
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:4980
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:1568
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:5088
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5076
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:4128
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:4228
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:4432
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:4528
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:4676
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:4644
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:4864
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:4960
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:4108
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:4328
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:4760
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:4644
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:4328
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5016
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:5140
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5148
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:5172
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:5180
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:5204
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5220
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:5276
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5284
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:5312
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5320
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:5352
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5360
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:5388
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5396
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:5420
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5428
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:5456
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5464
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:5568
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:5576
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:5600
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:5608
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:5632
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5648
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:5668
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:5684
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:5704
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5716
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:5748
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5756
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:5784
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:5792
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:5816
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:5824
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:5848
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5856
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:5880
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5888
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:5912
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:5920
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:5944
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5952
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:5976
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5984
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:6008
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:6016
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:6040
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:6048
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:6072
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:6080
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:6104
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:6112
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:6136
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5128
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:5192
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:5180
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:5288
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5332
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:5360
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:5400
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:5540
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5464
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:5608
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5664
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:5684
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:5712
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:5780
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:5756
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:5824
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5860
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:5924
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5964
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:6028
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:6016
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:6080
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:6116
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:5216
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5320
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:5576
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5464
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:5712
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5804
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:5956
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:6048
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:5432
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5320
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:5804
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:6060
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:6048
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:6148
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:6172
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:6180
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:6204
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:6212
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:6240
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:6248
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:6272
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:6280
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:6304
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:6312
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:6336
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:6344
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:6368
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:6376
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:6400
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:6408
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:6432
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:6440
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:6464
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:6472
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:6496
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:6504
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:6528
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:6536
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:6560
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:6568
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:6592
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:6600
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:6628
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:6636
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:6660
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:6668
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:6692
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:6700
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:6724
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:6732
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:6756
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:6764
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:6788
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:6796
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:6820
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:6828
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:6852
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:6860
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:6884
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:6892
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:6916
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:6924
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:6948
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:6956
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:6984
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:6992
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:7016
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:7024
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:7048
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:7056
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:7080
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:7088
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:7112
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:7120
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:7144
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:7152
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:6148
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:6184
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:6216
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:5240
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:6252
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:6292
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:6356
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:6344
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:6408
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:6444
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:6508
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:6548
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:6612
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:6624
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:5528
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5552
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:6640
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:6680
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:5552
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:6892
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:6580
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:5964
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:6700
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5128
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:7000
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:6980

C:\Windows\SysWOW64\DllHost.exe
C:\Windows\SysWOW64\DllHost.exe /Processid:{06622D85-6856-4460-8DE1-A81921B41C4B}
1⤵
PID:5236

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads