Malware Analysis Report

2025-01-03 08:32

Sample ID 240610-3rdm9awcqj
Target NicoVirus.rar
SHA256 540a9d2c26aa115b2ff9de27cc5a9dd5f2e18b3e23a2ec2d940b0b8bc046d8a3
Tags
ransomware
score
5/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
5/10

SHA256

540a9d2c26aa115b2ff9de27cc5a9dd5f2e18b3e23a2ec2d940b0b8bc046d8a3

Threat Level: Likely benign

The file NicoVirus.rar was found to be: Likely benign.

Malicious Activity Summary

ransomware

Sets desktop wallpaper using registry

Enumerates physical storage devices

Suspicious behavior: EnumeratesProcesses

Suspicious use of SetWindowsHookEx

Checks processor information in registry

Runs ping.exe

Suspicious behavior: GetForegroundWindowSpam

Modifies registry class

Suspicious behavior: AddClipboardFormatListener

Suspicious use of WriteProcessMemory

Suspicious use of FindShellTrayWindow

Suspicious use of AdjustPrivilegeToken

Modifies Internet Explorer settings

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-06-10 23:44

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-10 23:44

Reported

2024-06-10 23:48

Platform

win10-20240404-en

Max time kernel

87s

Max time network

213s

Command Line

cmd /c C:\Users\Admin\AppData\Local\Temp\NicoVirus.rar

Signatures

Sets desktop wallpaper using registry

ransomware
Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000\Control Panel\Desktop\Wallpaper = "C:\\Users\\Admin\\Desktop\\NicoVirus\\f.jpg" C:\Windows\system32\reg.exe N/A

Enumerates physical storage devices

Checks processor information in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe N/A

Modifies Internet Explorer settings

adware spyware
Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings C:\Windows\explorer.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings C:\Windows\system32\control.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings C:\Windows\explorer.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings C:\Windows\system32\cmd.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings C:\Windows\system32\OpenWith.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings C:\Windows\explorer.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings C:\Windows\system32\control.exe N/A

Runs ping.exe

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A N/A N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe N/A
N/A N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe N/A
N/A N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe N/A
N/A N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe N/A
N/A N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe N/A
N/A N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe N/A
N/A N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe N/A
N/A N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe N/A
N/A N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe N/A
N/A N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe N/A
N/A N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe N/A
N/A N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe N/A
N/A N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe N/A
N/A N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe N/A
N/A N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe N/A
N/A N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe N/A
N/A N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe N/A
N/A N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe N/A
N/A N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe N/A
N/A N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe N/A

Suspicious behavior: GetForegroundWindowSpam

Description Indicator Process Target
N/A N/A C:\Windows\system32\OpenWith.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeRestorePrivilege N/A C:\Program Files\7-Zip\7zFM.exe N/A
Token: 35 N/A C:\Program Files\7-Zip\7zFM.exe N/A
Token: SeSecurityPrivilege N/A C:\Program Files\7-Zip\7zFM.exe N/A

Suspicious use of SetWindowsHookEx

Description Indicator Process Target
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Windows\system32\OpenWith.exe N/A
N/A N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe N/A
N/A N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe N/A
N/A N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe N/A
N/A N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe N/A
N/A N/A C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE N/A
N/A N/A C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 812 wrote to memory of 2784 N/A C:\Windows\system32\OpenWith.exe C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
PID 812 wrote to memory of 2784 N/A C:\Windows\system32\OpenWith.exe C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
PID 812 wrote to memory of 2784 N/A C:\Windows\system32\OpenWith.exe C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
PID 2784 wrote to memory of 1848 N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
PID 2784 wrote to memory of 1848 N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
PID 2784 wrote to memory of 1848 N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
PID 1848 wrote to memory of 4380 N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
PID 1848 wrote to memory of 4380 N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
PID 1848 wrote to memory of 4380 N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
PID 1848 wrote to memory of 4380 N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
PID 1848 wrote to memory of 4380 N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
PID 1848 wrote to memory of 4380 N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
PID 1848 wrote to memory of 4380 N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
PID 1848 wrote to memory of 4380 N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
PID 1848 wrote to memory of 4380 N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
PID 1848 wrote to memory of 4380 N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
PID 1848 wrote to memory of 4380 N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
PID 1848 wrote to memory of 4380 N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
PID 1848 wrote to memory of 4380 N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
PID 1848 wrote to memory of 4380 N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
PID 1848 wrote to memory of 4380 N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
PID 1848 wrote to memory of 4380 N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
PID 1848 wrote to memory of 4380 N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
PID 1848 wrote to memory of 4380 N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
PID 1848 wrote to memory of 4380 N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
PID 1848 wrote to memory of 4380 N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
PID 1848 wrote to memory of 4380 N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
PID 1848 wrote to memory of 4380 N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
PID 1848 wrote to memory of 4380 N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
PID 1848 wrote to memory of 4380 N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
PID 1848 wrote to memory of 4380 N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
PID 1848 wrote to memory of 4380 N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
PID 1848 wrote to memory of 4380 N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
PID 1848 wrote to memory of 4380 N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
PID 1848 wrote to memory of 4380 N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
PID 1848 wrote to memory of 4380 N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
PID 1848 wrote to memory of 4380 N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
PID 1848 wrote to memory of 4380 N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
PID 1848 wrote to memory of 4380 N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
PID 1848 wrote to memory of 4380 N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
PID 1848 wrote to memory of 4380 N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
PID 1848 wrote to memory of 4380 N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
PID 1848 wrote to memory of 4380 N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
PID 1848 wrote to memory of 4380 N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
PID 1848 wrote to memory of 4380 N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
PID 1848 wrote to memory of 4380 N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
PID 1848 wrote to memory of 4380 N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
PID 1848 wrote to memory of 5068 N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
PID 1848 wrote to memory of 5068 N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
PID 1848 wrote to memory of 5068 N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
PID 1848 wrote to memory of 5068 N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
PID 1848 wrote to memory of 5068 N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
PID 1848 wrote to memory of 5068 N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
PID 1848 wrote to memory of 5068 N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
PID 1848 wrote to memory of 5068 N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
PID 1848 wrote to memory of 5068 N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
PID 1848 wrote to memory of 5068 N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
PID 1848 wrote to memory of 5068 N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
PID 1848 wrote to memory of 5068 N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
PID 1848 wrote to memory of 5068 N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
PID 1848 wrote to memory of 5068 N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
PID 1848 wrote to memory of 5068 N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
PID 1848 wrote to memory of 5068 N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
PID 1848 wrote to memory of 5068 N/A C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe

Processes

C:\Windows\system32\cmd.exe

cmd /c C:\Users\Admin\AppData\Local\Temp\NicoVirus.rar

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\NicoVirus.rar"

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --backgroundcolor=16514043

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=D5757D19AC5ABDE27258E1015B3C6833 --mojo-platform-channel-handle=1612 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:2

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=renderer --disable-browser-side-navigation --disable-gpu-compositing --service-pipe-token=3F53B0DC333D2892E9C80F179D234DFC --lang=en-US --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --enable-gpu-async-worker-context --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;0,18,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;1,18,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;2,18,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;3,18,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;4,18,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;5,18,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553;6,18,3553 --disable-accelerated-video-decode --service-request-channel-token=3F53B0DC333D2892E9C80F179D234DFC --renderer-client-id=2 --mojo-platform-channel-handle=1620 --allow-no-sandbox-job /prefetch:1

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=3E7B9012EE79BBF338EE756F1B3A625B --mojo-platform-channel-handle=2212 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:2

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=437F20870F2D5F3BC08989BC67AA9E01 --mojo-platform-channel-handle=1792 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:2

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe

"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=9A06A1F975C3109B5F3FA5A2C0A7D58F --mojo-platform-channel-handle=1696 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:2

C:\Windows\System32\rundll32.exe

C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding

C:\Program Files\7-Zip\7zFM.exe

"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\Desktop\NicoVirus.rar"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\Users\Admin\Desktop\NicoVirus\NicoVirus.bat" "

C:\Windows\system32\reg.exe

reg add "HKEY_CURRENT_USER\Control Panel\Desktop" /v Wallpaper /t REG_SZ /d "C:\Users\Admin\Desktop\NicoVirus\f.jpg" /f

C:\Windows\system32\rundll32.exe

RUNDLL32.EXE user32.dll,UpdatePerUserSystemParameters

C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE

"C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE"

C:\Windows\system32\cmd.exe

cmd

C:\Windows\explorer.exe

explorer

C:\Windows\system32\control.exe

control

C:\Windows\system32\calc.exe

calc

C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE

"C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE"

C:\Windows\system32\cmd.exe

cmd

C:\Windows\explorer.exe

explorer

C:\Windows\system32\control.exe

control

C:\Windows\system32\calc.exe

calc

C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE

"C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE"

C:\Windows\system32\cmd.exe

cmd

C:\Windows\explorer.exe

explorer

C:\Windows\system32\control.exe

control

C:\Windows\system32\calc.exe

calc

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE

"C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE"

C:\Windows\system32\cmd.exe

cmd

C:\Windows\explorer.exe

explorer

C:\Windows\system32\control.exe

control

C:\Windows\system32\calc.exe

calc

C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE

"C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE"

C:\Windows\system32\cmd.exe

cmd

C:\Windows\explorer.exe

explorer

C:\Windows\system32\control.exe

control

C:\Windows\system32\calc.exe

calc

C:\Windows\SysWOW64\DllHost.exe

C:\Windows\SysWOW64\DllHost.exe /Processid:{06622D85-6856-4460-8DE1-A81921B41C4B}

C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE

"C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE"

C:\Windows\system32\cmd.exe

cmd

C:\Windows\explorer.exe

explorer

C:\Windows\system32\control.exe

control

C:\Windows\system32\calc.exe

calc

C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE

"C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE"

C:\Windows\system32\cmd.exe

cmd

C:\Windows\explorer.exe

explorer

C:\Windows\system32\control.exe

control

C:\Windows\system32\calc.exe

calc

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\System32\Conhost.exe

\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\OpenWith.exe

C:\Windows\system32\OpenWith.exe -Embedding

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\System32\Conhost.exe

\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

C:\Windows\system32\PING.EXE

ping -n 10000 localhost

Network

Country Destination Domain Proto
IE 52.111.236.23:443 tcp
US 8.8.8.8:53 roaming.officeapps.live.com udp
US 8.8.8.8:53 metadata.templates.cdn.office.net udp

Files

C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db

MD5 88d6d574b59410c60a56ab80428ad4f1
SHA1 8653c9a6fea81fb2130bd97945effa33f22bf171
SHA256 91a337d572fa0cf88b5b0c71d2a80fd900205319c0b52629648e2acc516733d6
SHA512 f13055f4b97a3b1bc93fb6b390d9d5165241a8016c1b567ed28528dedd3d496d8b1ff31d94224266c597bd2882907109df49bab870047e75f115e81219d84f48

C:\Users\Admin\Desktop\NicoVirus.rar

MD5 e1f2077603f210a2a4d50a973e17599c
SHA1 c4c5d4d0a75a521dbfb0ecdaf044a8e325b7ec16
SHA256 540a9d2c26aa115b2ff9de27cc5a9dd5f2e18b3e23a2ec2d940b0b8bc046d8a3
SHA512 57a2b4625e4cc20e9726e83f831eba1887f419abdb1bd1e24c812ad869caeeaac04da72aa894fdf93c8238e60cfcab40d42b43b9a2e7bd1231a7b4af7a828ffd

C:\Users\Admin\Desktop\NicoVirus\NicoVirus.bat

MD5 d0502e79eb346e37f4bda5d0ce2fb53a
SHA1 23d9ae0e4a7407c3a3fa420776b6db2bef6dc9e4
SHA256 25e7c55a59d3d9fec976fc6dc401cbe6cb35bc57b9cd3e912b07551765aafdc3
SHA512 ce2bfc97a89540ae8ff8ab5bf2acd85f0d4d5206f0c35922dd6bc50b08f666f306b9f8baed755040a8b4fb4e950629e305d2e1f3647fc1d6c0d7bddf89270789

memory/2076-61-0x00007FF80CB30000-0x00007FF80CB40000-memory.dmp

memory/2076-62-0x00007FF80CB30000-0x00007FF80CB40000-memory.dmp

memory/2076-60-0x00007FF80CB30000-0x00007FF80CB40000-memory.dmp

memory/2076-63-0x00007FF80CB30000-0x00007FF80CB40000-memory.dmp

memory/2076-69-0x00007FF809220000-0x00007FF809230000-memory.dmp

memory/2076-79-0x00007FF809220000-0x00007FF809230000-memory.dmp