d4e56bfa3f9a4444ed4e994a35ce0b2b7b52465bdfa258f9f97bee20c3c77f28

Analysis

max time kernel
150s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
03/06/2024, 12:07

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
dont run this.bat
Size 682B
Sample240603-pabwfadh31
SHA256 d4e56bfa3f9a4444ed4e994a35ce0b2b7b52465bdfa258f9f97bee20c3c77f28
MD5 b883fd4b6d20b823d4bfe33fd6443695
SHA1 c2b4878ed094f3eb67d83ceef13ac6523b91e986
SHA512 471e5c1f42ba0da4117d65c666b105c1565b7749a9bc9a6713fcea32221aa7213065210250830878a845e1cb231ee9e2c87ae06cf82ed4239aaab6c770c788f6
MD5 SHA1 SHA512

Score

8^/10

persistence

Malware Config

Signatures

Modifies Installed Components in the registry 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3558294865-3673844354-2255444939-1000\Software\Microsoft\Active Setup\Installed Components	explorer.exe

Checks SCSI registry key(s) 3 TTPs 6 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\HardwareID	dwm.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\HardwareID	dwm.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_QEMU&PROD_QEMU_DVD-ROM\4&215468A5&0&010000	dwm.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\ConfigFlags	dwm.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_DADY&PROD_HARDDISK\4&215468A5&0&000000	dwm.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\ConfigFlags	dwm.exe

Delays execution with timeout.exe 64 IoCs

evasion

pid	Process
5340	Process not Found
7604	Process not Found
8828	Process not Found
8872	timeout.exe
6900	timeout.exe
7956	timeout.exe
7244	Process not Found
10764	Process not Found
14460	Process not Found
13176	Process not Found
8404	Process not Found
8640	timeout.exe
11160	timeout.exe
16328	timeout.exe
12712	Process not Found
8720	Process not Found
3616	timeout.exe
9444	Process not Found
16036	Process not Found
10912	Process not Found
4600	Process not Found
6268	timeout.exe
13956	timeout.exe
4552	Process not Found
11000	Process not Found
10160	Process not Found
3864	Process not Found
11244	Process not Found
3676	Process not Found
9384	Process not Found
13440	Process not Found
13548	timeout.exe
11060	timeout.exe
13464	Process not Found
7236	timeout.exe
1932	timeout.exe
7196	Process not Found
15588	Process not Found
2324	Process not Found
532	Process not Found
13824	Process not Found
11756	timeout.exe
13136	timeout.exe
15968	Process not Found
8472	Process not Found
5028	Process not Found
2696	timeout.exe
4756	timeout.exe
5316	Process not Found
13636	Process not Found
6616	Process not Found
4148	Process not Found
14196	Process not Found
5456	timeout.exe
3984	timeout.exe
9956	timeout.exe
11284	Process not Found
4188	timeout.exe
2700	Process not Found
5308	Process not Found
14804	Process not Found
12100	Process not Found
13080	timeout.exe
8028	timeout.exe

Enumerates system info in registry 2 TTPs 2 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	dwm.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU	dwm.exe

Modifies data under HKEY_USERS 18 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root	dwm.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\2a\52C64B7E	dwm.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache	dwm.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft	dwm.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates	dwm.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing	dwm.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople	dwm.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust	dwm.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust	dwm.exe
Key created	\REGISTRY\USER\.DEFAULT\Software	dwm.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA	dwm.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft	dwm.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed	dwm.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople	dwm.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA	dwm.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies	dwm.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates	dwm.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed	dwm.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3558294865-3673844354-2255444939-1000\{F68D864C-F782-4329-ACBB-8532962FAED4}	explorer.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	explorer.exe

Suspicious use of AdjustPrivilegeToken 10 IoCs

description	pid	Process
Token: SeCreateGlobalPrivilege	14092	dwm.exe
Token: SeChangeNotifyPrivilege	14092	dwm.exe
Token: 33	14092	dwm.exe
Token: SeIncBasePriorityPrivilege	14092	dwm.exe
Token: SeShutdownPrivilege	5244	explorer.exe
Token: SeCreatePagefilePrivilege	5244	explorer.exe
Token: SeShutdownPrivilege	5244	explorer.exe
Token: SeCreatePagefilePrivilege	5244	explorer.exe
Token: SeShutdownPrivilege	14092	dwm.exe
Token: SeCreatePagefilePrivilege	14092	dwm.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4560 wrote to memory of 1680	4560	cmd.exe	83
PID 4560 wrote to memory of 1680	4560	cmd.exe	83
PID 4560 wrote to memory of 4364	4560	cmd.exe	87
PID 4560 wrote to memory of 4364	4560	cmd.exe	87
PID 4560 wrote to memory of 3808	4560	cmd.exe	88
PID 4560 wrote to memory of 3808	4560	cmd.exe	88
PID 4560 wrote to memory of 1376	4560	cmd.exe	90
PID 4560 wrote to memory of 1376	4560	cmd.exe	90
PID 4560 wrote to memory of 4636	4560	cmd.exe	91
PID 4560 wrote to memory of 4636	4560	cmd.exe	91
PID 4560 wrote to memory of 688	4560	cmd.exe	93
PID 4560 wrote to memory of 688	4560	cmd.exe	93
PID 4560 wrote to memory of 3616	4560	cmd.exe	94
PID 4560 wrote to memory of 3616	4560	cmd.exe	94
PID 4560 wrote to memory of 3148	4560	cmd.exe	96
PID 4560 wrote to memory of 3148	4560	cmd.exe	96
PID 4560 wrote to memory of 3328	4560	cmd.exe	97
PID 4560 wrote to memory of 3328	4560	cmd.exe	97
PID 4560 wrote to memory of 1824	4560	cmd.exe	99
PID 4560 wrote to memory of 1824	4560	cmd.exe	99
PID 4560 wrote to memory of 3672	4560	cmd.exe	101
PID 4560 wrote to memory of 3672	4560	cmd.exe	101
PID 4560 wrote to memory of 3560	4560	cmd.exe	102
PID 4560 wrote to memory of 3560	4560	cmd.exe	102
PID 4560 wrote to memory of 4856	4560	cmd.exe	103
PID 4560 wrote to memory of 4856	4560	cmd.exe	103
PID 4560 wrote to memory of 4516	4560	cmd.exe	105
PID 4560 wrote to memory of 4516	4560	cmd.exe	105
PID 4560 wrote to memory of 5032	4560	cmd.exe	106
PID 4560 wrote to memory of 5032	4560	cmd.exe	106
PID 4560 wrote to memory of 1852	4560	cmd.exe	108
PID 4560 wrote to memory of 1852	4560	cmd.exe	108
PID 4560 wrote to memory of 3684	4560	cmd.exe	110
PID 4560 wrote to memory of 3684	4560	cmd.exe	110
PID 4560 wrote to memory of 1316	4560	cmd.exe	112
PID 4560 wrote to memory of 1316	4560	cmd.exe	112
PID 4560 wrote to memory of 2788	4560	cmd.exe	114
PID 4560 wrote to memory of 2788	4560	cmd.exe	114
PID 4560 wrote to memory of 336	4560	cmd.exe	115
PID 4560 wrote to memory of 336	4560	cmd.exe	115
PID 4560 wrote to memory of 4960	4560	cmd.exe	116
PID 4560 wrote to memory of 4960	4560	cmd.exe	116
PID 4560 wrote to memory of 3352	4560	cmd.exe	118
PID 4560 wrote to memory of 3352	4560	cmd.exe	118
PID 4560 wrote to memory of 3440	4560	cmd.exe	119
PID 4560 wrote to memory of 3440	4560	cmd.exe	119
PID 4560 wrote to memory of 1876	4560	cmd.exe	121
PID 4560 wrote to memory of 1876	4560	cmd.exe	121
PID 4560 wrote to memory of 3756	4560	cmd.exe	122
PID 4560 wrote to memory of 3756	4560	cmd.exe	122
PID 4560 wrote to memory of 3644	4560	cmd.exe	124
PID 4560 wrote to memory of 3644	4560	cmd.exe	124
PID 4560 wrote to memory of 4528	4560	cmd.exe	126
PID 4560 wrote to memory of 4528	4560	cmd.exe	126
PID 4560 wrote to memory of 1928	4560	cmd.exe	127
PID 4560 wrote to memory of 1928	4560	cmd.exe	127
PID 4560 wrote to memory of 3640	4560	cmd.exe	129
PID 4560 wrote to memory of 3640	4560	cmd.exe	129
PID 4560 wrote to memory of 2332	4560	cmd.exe	130
PID 4560 wrote to memory of 2332	4560	cmd.exe	130
PID 4560 wrote to memory of 1468	4560	cmd.exe	131
PID 4560 wrote to memory of 1468	4560	cmd.exe	131
PID 4560 wrote to memory of 4268	4560	cmd.exe	133
PID 4560 wrote to memory of 4268	4560	cmd.exe	133

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\dont run this.bat"
1⤵
- Suspicious use of WriteProcessMemory
PID:4560
- C:\Windows\system32\timeout.exe
  timeout /t 1
  2⤵
  PID:1680
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:4364
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:3808
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:1376
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:4636
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:688
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:3616
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:3148
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:3328
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:1824
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:3672
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:3560
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:4856
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:4516
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5032
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:1852
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:3684
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:1316
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:2788
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:336
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:4960
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:3352
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:3440
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:1876
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:3756
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:3644
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:4528
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:1928
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:3640
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:2332
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:1468
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:4268
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:1644
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:220
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:2696
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:5116
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:3484
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:404
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:2548
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:2140
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:3596
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:4652
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:3668
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:4604
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:3808
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:3044
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:3328
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:5068
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:4856
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:3636
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:1984
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:4848
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:4884
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:3752
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:2784
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:4248
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:1664
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:2548
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:3652
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:4856
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:380
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:2784
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:3596
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:4884
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:1028
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:5156
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5172
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:5220
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5228
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:5280
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5288
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:5352
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5360
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:5448
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5456
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:5528
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5544
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:5644
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5652
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:5736
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5756
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:5848
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5856
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:5912
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5920
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:5992
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:6008
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:6056
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:6064
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:6120
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:6136
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:5172
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5232
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:5468
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:5456
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:5652
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5760
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:5944
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:6032
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:2904
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:2544
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:5540
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5756
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:6140
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5456
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:6184
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:6192
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:6252
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:6268
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:6312
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:6328
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:6384
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:6400
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:6480
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:6488
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:6544
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:6560
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:6604
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:6612
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:6664
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:6680
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:6728
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:6744
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:6788
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:6804
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:6848
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:6864
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:6908
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:6924
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:6968
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:6984
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:7036
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:7052
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:7096
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:7104
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:7156
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5796
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:6264
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:6268
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:6400
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:6512
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:6628
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:6676
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:6824
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:6860
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:6984
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:7072
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:6684
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:6676
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:7216
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:7236
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:7292
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:7332
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:7368
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:7376
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:7432
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:7440
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:7492
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:7508
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:7552
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:7568
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:7612
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:7628
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:7672
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:7688
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:7776
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:7784
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:7844
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:7860
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:7904
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:7920
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:7968
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:7976
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:8032
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:8048
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:8092
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:8100
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:8160
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:8176
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:7264
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:7352
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:7472
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:7512
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:5376
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5432
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:7732
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:7736
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:7812
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:7864
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:7996
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:8052
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:8180
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:7336
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:5416
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:7728
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:8120
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:7348
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:1416
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:2440
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:4296
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:7348
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:8200
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:8216
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:8260
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:8276
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:8320
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:8328
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:8380
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:8396
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:8440
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:8448
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:8500
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:8516
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:8560
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:8576
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:8624
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:8640
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:8684
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:8700
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:8744
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:8760
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:8804
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:8820
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:8864
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:8872
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:8924
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:8940
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:8984
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:9000
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:9056
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:9072
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:9116
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:9132
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:9176
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:9184
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:8220
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:8236
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:8400
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:8460
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:8572
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:8576
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:4892
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:8700
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:8840
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:8884
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:9024
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:9068
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:9132
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:9188
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:8460
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:8636
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:8872
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:8612
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:1784
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:2160
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:1964
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:8236
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:400
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:4776
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:9228
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:9244
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:9292
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:9308
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:9352
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:9368
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:9412
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:9428
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:9472
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:9488
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:9532
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:9548
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:9592
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:9608
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:9652
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:9660
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:9716
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:9732
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:9776
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:9792
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:9836
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:9852
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:9896
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:9912
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:9960
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:9976
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:10020
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:10036
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:10080
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:10096
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:10144
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:10160
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:10208
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:10224
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:9264
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:9304
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:9448
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:9484
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:9612
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:9672
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:9788
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:9792
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:9972
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:9976
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:10156
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:10164
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:9304
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:4368
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:9792
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:10036
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:10092
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:10036
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:10284
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:10292
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:10344
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:10352
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:10404
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:10420
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:10464
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:10480
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:10524
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:10540
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:10584
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:10600
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:10644
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:10660
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:10704
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:10720
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:10768
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:10784
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:10828
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:10836
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:10888
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:10896
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:10948
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:10956
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:11008
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:11024
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:11068
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:11084
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:11128
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:11144
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:11192
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:11208
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:11256
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:10244
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:10384
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:10352
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:10564
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:10604
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:10724
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:10780
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:10900
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:10968
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:11088
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:11160
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:1128
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:10252
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:10604
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:10808
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:10244
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:4928
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:11320
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:11336
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:11396
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:11412
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:11456
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:11464
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:11524
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:11532
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:11588
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:11596
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:11660
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:11668
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:11728
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:11744
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:11800
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:11816
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:11876
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:11892
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:11956
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:11972
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:12028
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:12044
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:12088
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:12104
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:12164
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:12180
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:12232
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:12248
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:396
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:11252
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:11412
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:712
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:11608
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:3820
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:11740
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:11756
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:11888
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:11904
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:12040
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:2396
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:1388
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:12104
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:12260
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:11288
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:11316
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:10780
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:2380
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:3820
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:11892
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:3976
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:3992
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:3984
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:10780
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:11748
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:3684
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:2476
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:12304
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:12320
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:12372
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:12388
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:12444
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:12452
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:12516
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:12532
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:12584
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:12592
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:12652
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:12668
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:12720
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:12728
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:12788
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:12804
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:12856
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:12872
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:12924
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:12940
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:12992
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:13008
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:13060
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:13076
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:13132
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:13140
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:13208
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:13216
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:13244
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:13252
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:4844
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:12328
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:12400
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5032
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:12544
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:12532
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:12804
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5336
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:13004
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5504
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:13156
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:13180
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:13148
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:13280
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:5900
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:13268
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:13132
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5984
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:12396
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:1468
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:5148
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5152
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:12604
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:2932
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5336
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:13144
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5404
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:13160
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5684
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:13172
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:13156
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:13184
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:13180
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:13188
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5844
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:13148
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5924
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:3616
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:2476
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:12384
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:1724
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:12536
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:12672
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:12608
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:12872
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5188
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:13016
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5336
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:13180
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:13276
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:1072
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:5984
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:12316
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:12384
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5212
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:12540
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5148
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:6044
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5036
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:13184
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:3048
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5924
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:12320
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:13132
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:1072
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:12452
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:12456
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:12396
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5148
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5188
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:1260
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:512
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:6900
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:13184
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:6964
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:13264
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:12472
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:7020
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:6656
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:6304
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:13252
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:12672
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:7152
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:13200
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:13136
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:3048
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:1932
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:5988
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:6428
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:7020
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5984
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:12676
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:13252
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:12532
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:4564
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:6840
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:6900
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:13188
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:4512
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:12936
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:12464
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:12672
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:12612
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:6536
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:13264
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:13276
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:12452
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:7020
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5984
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:12676
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:7148
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:7548
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:3048
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:13276
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:4512
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:6660
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:6304
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:7020
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:7764
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:12676
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:12612
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:7964
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:13184
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:7668
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5952
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:7836
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5984
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:6476
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:8152
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:7148
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:7276
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:3048
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:7964
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:6660
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5952
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:7840
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5984
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:7764
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:13280
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:6808
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:7960
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:7684
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:13084
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:13080
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:7692
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:7240
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:7956
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:6308
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:8112
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:13084
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:13080
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:6476
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:7240
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:8072
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:13020
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:13188
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:13080
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:7240
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:6044
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:5408
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:8196
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:8372
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:7956
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:8492
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:8196
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:8552
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:8312
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:7956
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:7960
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:8552
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:8620
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:7956
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:8616
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:8676
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:7956
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:8676
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:8492
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:1228
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:8620
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:8492
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:7956
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:8492
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:1228
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:7956
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:8492
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:8676
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:1228
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:8676
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:8916
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:7956
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:1228
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:8920
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:1228
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:8676
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:8980
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:8492
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:13336
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:13344
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:13396
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:13404
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:13440
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:13448
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:13500
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:13532
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:13552
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:13576
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:13584
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:13656
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:13664
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:13700
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:13708
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:13768
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:13784
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:13792
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:13956
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:14048
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:14064
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:14256
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:14264
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:13368
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:13340
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:13408
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:13460
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:13536
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:13548
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:13560
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:13636
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:13616
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:13676
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:13684
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:13720
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:13716
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5708
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:9004
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:13824
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:2232
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:13868
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:1248
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:1660
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:5016
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:3428
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:9464
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:4756
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:5572
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:13020
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:14064
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:9956
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:9268
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:14308
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:10096
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:13340
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:13504
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:13472
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:10520
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:13776
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:14552
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:14564
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:14696
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:14712
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:14896
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:14912
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:14956
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:14964
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:15024
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:15040
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:15104
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:15124
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:15184
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:15192
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:15268
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:15284
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:15336
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:15352
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:14648
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:11080
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:11156
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:880
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:15204
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:4468
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:2980
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:15348
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:4164
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:14936
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:15280
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:636
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:11792
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:12220
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:3624
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:636
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:876
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:1568
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:15404
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:15412
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:15476
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:15492
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:15548
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:15564
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:15628
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:15636
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:15700
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:15708
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:15772
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:15780
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:15844
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:15904
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:15912
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:15956
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:15964
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:16036
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:16072
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:16080
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:16140
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:16192
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:16256
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:16324
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:16356
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:16380
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:232
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:1624
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:15492
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:15568
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:15648
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:15640
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:15720
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:1192
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:1092
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:15872
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:15868
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:15848
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:15800
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:15804
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:15924
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:12440
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:15908
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:15912
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:12504
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:1124
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:16020
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:16048
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5180
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:16096
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:12784
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:12852
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:16144
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:16184
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:12916
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:5444
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5488
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:16212
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:16192
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:13128
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:15772
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:16260
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:16320
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:6016
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:16336
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:6080
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:16372
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:15428
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:12100
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:3520
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:232
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:4112
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:10036
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:15512
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5548
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5072
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:15636
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:15720
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:15780
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:15860
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:15844
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:15900
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:15776
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:15824
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:12436
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:4460
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:5760
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:15920
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:15928
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:16004
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:16024
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:12580
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:1508
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5184
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:16084
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:12780
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:6336
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:16140
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:16248
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:13128
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:6568
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:16284
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:4620
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:16328
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:3484
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:6688
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:15428
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:15412
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:15496
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:1624
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:6812
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:11968
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:864
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5072
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:4260
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:6940
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:12300
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:1092
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:15900
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:15800
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:15948
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:15952
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:6220
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:15920
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:15928
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:15968
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:15964
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:6348
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:6228
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:16092
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:6564
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:16096
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:16112
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:16120
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:15504
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:3772
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:15804
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:6616
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:3572
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:3592
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:16344
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:4188
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:3736
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:3568
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:3612
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:3832
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:16272
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:3496
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:15536
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:16288
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:16280
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:16276
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:3060
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:6404
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:16108
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:3456
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:12920
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:1020
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:3940
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:1660
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:3716
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:1932
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:10696
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:13868
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:10140
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:11060
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:5176
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:10304
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:14356
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:14364
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:14432
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:14452
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:14472
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:14488
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:14504
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:14532
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:14596
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:14112
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:14752
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:14780
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:14808
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:14828
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:14856
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:13048
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5732
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:7116
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5936
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:7076
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:15424
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:7244
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:15428
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:12100
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:4084
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:7404
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:12916
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5476
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:7528
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5244
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:15564
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:15496
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:6876
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:6812
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:2496
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:15712
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:3864
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:6068
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:6940
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:15780
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:1104
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:7808
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:7136
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:15904
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:12508
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:12504
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:6192
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:15968
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:16024
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:6332
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:16048
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:16092
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:6556
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5184
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  - Delays execution with timeout.exe
  PID:8028
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:16112
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:16120
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:15828
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:1476
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:8140
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:6616
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:2700
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:16224
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:15876
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:4188
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:7332
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:3736
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:3568
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:16164
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:15608
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:5344
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:5980
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:1000
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:3576
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:15760
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:1392
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:15464
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:3480
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:6288
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:16108
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:13904
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:8128
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:3936
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:4756
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:16144
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:13188
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:1188
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:1932
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:7744
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:13868
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:10140
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:7256
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:14340
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:10364
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:14352
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:3436
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:3508
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:14392
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:14424
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:14440
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:14476
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:14492
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:14580
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:14612
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:14748
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:14756
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:14760
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:14792
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:14788
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:14824
- C:\Windows\system32\cmd.exe
  cmd /k "call :spam"
  2⤵
  PID:3924
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:6864
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:2544
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:16260
- C:\Windows\system32\timeout.exe
  timeout /t 0
  2⤵
  PID:16148

C:\Windows\system32\dwm.exe
"dwm.exe"
1⤵
- Checks SCSI registry key(s)
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious use of AdjustPrivilegeToken
PID:14092

C:\Windows\explorer.exe
explorer.exe
1⤵
- Modifies Installed Components in the registry
- Modifies registry class
- Suspicious use of AdjustPrivilegeToken
PID:5244

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1316-62-0x00007FF686480000-0x00007FF6864E7000-memory.dmp

Download

memory/1376-25-0x00007FF686480000-0x00007FF6864E7000-memory.dmp

Download

memory/2700-21-0x00007FFB617D0000-0x00007FFB619C5000-memory.dmp

Download

memory/3048-4-0x00007FF686480000-0x00007FF6864E7000-memory.dmp

Download

memory/3428-32-0x00007FFB617D0000-0x00007FFB619C5000-memory.dmp

Download

memory/3508-23-0x00007FF686480000-0x00007FF6864E7000-memory.dmp

Download

memory/3568-22-0x00007FF686480000-0x00007FF6864E7000-memory.dmp

Download

memory/3752-0-0x00007FF686480000-0x00007FF6864E7000-memory.dmp

Download

memory/4156-67-0x00007FF686480000-0x00007FF6864E7000-memory.dmp

Download

memory/4216-41-0x00007FF62B150000-0x00007FF62B15D000-memory.dmp

Download

memory/4236-49-0x00007FF62B150000-0x00007FF62B15D000-memory.dmp

Download

memory/4364-24-0x00007FF686480000-0x00007FF6864E7000-memory.dmp

Download

memory/4560-50-0x00007FFB617D0000-0x00007FFB619C5000-memory.dmp

Download

memory/5060-29-0x00007FF686480000-0x00007FF6864E7000-memory.dmp

Download

memory/5104-31-0x00007FFB5F720000-0x00007FFB5F820000-memory.dmp

Download

memory/5148-3-0x00007FF686480000-0x00007FF6864E7000-memory.dmp

Download

memory/5244-73-0x00007FF686480000-0x00007FF6864E7000-memory.dmp

Download

memory/5244-14-0x0000000003540000-0x0000000003541000-memory.dmp

Download

memory/5316-27-0x00007FFB5F820000-0x00007FFB5F8DE000-memory.dmp

Download

memory/5476-64-0x00007FF686480000-0x00007FF6864E7000-memory.dmp

Download

memory/5804-45-0x00007FFB617D0000-0x00007FFB619C5000-memory.dmp

Download

memory/5900-1-0x00007FF686480000-0x00007FF6864E7000-memory.dmp

Download

memory/6580-33-0x00007FF686480000-0x00007FF6864E7000-memory.dmp

Download

memory/7240-7-0x00007FF686480000-0x00007FF6864E7000-memory.dmp

Download

memory/7240-9-0x00007FF686480000-0x00007FF6864E7000-memory.dmp

Download

memory/7548-5-0x00007FF686480000-0x00007FF6864E7000-memory.dmp

Download

memory/7744-72-0x00007FF686480000-0x00007FF6864E7000-memory.dmp

Download

memory/7836-6-0x00007FF686480000-0x00007FF6864E7000-memory.dmp

Download

memory/7928-39-0x00007FFB5F540000-0x00007FFB5F64B000-memory.dmp

Download

memory/7956-10-0x00007FF686480000-0x00007FF6864E7000-memory.dmp

Download

memory/8284-71-0x00007FF686480000-0x00007FF6864E7000-memory.dmp

Download

memory/8436-63-0x00007FFB617D0000-0x00007FFB619C5000-memory.dmp

Download

memory/8592-26-0x00007FFB5F820000-0x00007FFB5F8DE000-memory.dmp

Download

memory/8828-47-0x00007FF686480000-0x00007FF6864E7000-memory.dmp

Download

memory/8980-11-0x00007FF686480000-0x00007FF6864E7000-memory.dmp

Download

memory/10760-59-0x00007FFB617D0000-0x00007FFB619C5000-memory.dmp

Download

memory/11100-60-0x00007FFB5F190000-0x00007FFB5F459000-memory.dmp

Download

memory/11120-61-0x00007FF62B150000-0x00007FF62B15D000-memory.dmp

Download

memory/11120-69-0x00007FF686480000-0x00007FF6864E7000-memory.dmp

Download

memory/11272-37-0x00007FF686480000-0x00007FF6864E7000-memory.dmp

Download

memory/11364-46-0x00007FFB617D0000-0x00007FFB619C5000-memory.dmp

Download

memory/11468-40-0x00007FF686480000-0x00007FF6864E7000-memory.dmp

Download

memory/12332-43-0x00007FFB60930000-0x00007FFB60AD1000-memory.dmp

Download

memory/12396-2-0x00007FF686480000-0x00007FF6864E7000-memory.dmp

Download

memory/12440-28-0x00007FFB617D0000-0x00007FFB619C5000-memory.dmp

Download

memory/13176-65-0x00007FF686480000-0x00007FF6864E7000-memory.dmp

Download

memory/13188-8-0x00007FF686480000-0x00007FF6864E7000-memory.dmp

Download

memory/13584-44-0x00007FF62B150000-0x00007FF62B15D000-memory.dmp

Download

memory/13640-34-0x00007FF686480000-0x00007FF6864E7000-memory.dmp

Download

memory/14628-36-0x00007FF686480000-0x00007FF6864E7000-memory.dmp

Download

memory/14668-70-0x00007FF686480000-0x00007FF6864E7000-memory.dmp

Download

memory/14780-17-0x00007FFB5F720000-0x00007FFB5F820000-memory.dmp

Download

memory/14856-18-0x00007FFB617D0000-0x00007FFB619C5000-memory.dmp

Download

memory/15424-19-0x00007FFB617D0000-0x00007FFB619C5000-memory.dmp

Download

memory/15780-30-0x00007FF686480000-0x00007FF6864E7000-memory.dmp

Download

memory/15800-66-0x00007FF686480000-0x00007FF6864E7000-memory.dmp

Download

memory/15800-48-0x00007FFB617D0000-0x00007FFB619C5000-memory.dmp

Download

memory/15952-38-0x00007FFB617D0000-0x00007FFB619C5000-memory.dmp

Download

memory/16044-35-0x00007FF686480000-0x00007FF6864E7000-memory.dmp

Download

memory/16092-20-0x00007FFB617D0000-0x00007FFB619C5000-memory.dmp

Download

memory/16108-68-0x00007FF686480000-0x00007FF6864E7000-memory.dmp

Download

memory/16280-16-0x00007FF686480000-0x00007FF6864E7000-memory.dmp

Download

memory/16344-15-0x00007FF686480000-0x00007FF6864E7000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads