Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
11/06/2024, 09:14
Static task
static1
Behavioral task
behavioral1
Sample
Roblox_In_a_Nutshell.exe
Resource
win10v2004-20240508-en
General
-
Target
Roblox_In_a_Nutshell.exe
-
Size
192KB
-
MD5
49980c046e0494fbc3553a56049c890a
-
SHA1
ccceca4e520938c28c51e12ae48e2a3c72ee4df4
-
SHA256
fdcb308898e071df3525fd2ed08f806a133a719756df024bc8ffe0512b10e1ab
-
SHA512
f31626c59ff9b013bc89a802c9848657156702a0dae64b38215b1dd6d7e8e0319788f97b9ce8603d28086e2f419abcd0349f397c901d3bdc73fabf36526a47df
-
SSDEEP
3072:UMobR7ezAjLOZvmX155GWp1icKAArDZz4N9GhbkrNEkYoVDDAi:xeR7eammhp0yN90QEx
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\wextract_cleanup0 = "rundll32.exe C:\\Windows\\system32\\advpack.dll,DelNodeRunDLL32 \"C:\\Users\\Admin\\AppData\\Local\\Temp\\IXP000.TMP\\\"" Roblox_In_a_Nutshell.exe -
Checks SCSI registry key(s) 3 TTPs 24 IoCs
SCSI information is often read in order to detect sandboxing environments.
description ioc Process Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\HardwareID Process not Found Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\HardwareID Process not Found Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\HardwareID Process not Found Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\ConfigFlags Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_DADY&PROD_HARDDISK\4&215468A5&0&000000 Process not Found Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\ConfigFlags Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_QEMU&PROD_QEMU_DVD-ROM\4&215468A5&0&010000 Process not Found Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\HardwareID Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_QEMU&PROD_QEMU_DVD-ROM\4&215468A5&0&010000 Process not Found Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\ConfigFlags Process not Found Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\HardwareID Process not Found Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\ConfigFlags Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_QEMU&PROD_QEMU_DVD-ROM\4&215468A5&0&010000 Process not Found Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\ConfigFlags Process not Found Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\ConfigFlags Process not Found Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\HardwareID Process not Found Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\ConfigFlags Process not Found Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\HardwareID Process not Found Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\HardwareID Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_DADY&PROD_HARDDISK\4&215468A5&0&000000 Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_DADY&PROD_HARDDISK\4&215468A5&0&000000 Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_DADY&PROD_HARDDISK\4&215468A5&0&000000 Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_QEMU&PROD_QEMU_DVD-ROM\4&215468A5&0&010000 Process not Found Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\ConfigFlags Process not Found -
Enumerates system info in registry 2 TTPs 8 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS Process not Found Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU Process not Found Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS Process not Found Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU Process not Found Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS Process not Found Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU Process not Found Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS Process not Found Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU Process not Found -
Modifies data under HKEY_USERS 64 IoCs
description ioc Process Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates Process not Found Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates Process not Found Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates Process not Found Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople Process not Found Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed Process not Found Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing Process not Found Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates Process not Found Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft Process not Found Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust Process not Found Key created \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache Process not Found Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust Process not Found Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople Process not Found Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed Process not Found Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust Process not Found Key created \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache Process not Found Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft Process not Found Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust Process not Found Key created \REGISTRY\USER\.DEFAULT\Software\Policies Process not Found Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed Process not Found Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople Process not Found Key created \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\2a\52C64B7E Process not Found Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople Process not Found Key created \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\2a\52C64B7E Process not Found Key created \REGISTRY\USER\.DEFAULT\Software\Policies Process not Found Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft Process not Found Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA Process not Found Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root Process not Found Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft Process not Found Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople Process not Found Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust Process not Found Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople Process not Found Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed Process not Found Key created \REGISTRY\USER\.DEFAULT\Software Process not Found Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft Process not Found Key created \REGISTRY\USER\.DEFAULT\Software Process not Found Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed Process not Found Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA Process not Found Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates Process not Found Key created \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\2a\52C64B7E Process not Found Key created \REGISTRY\USER\.DEFAULT\Software Process not Found Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed Process not Found Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing Process not Found Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA Process not Found Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates Process not Found Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust Process not Found Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates Process not Found Key created \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache Process not Found Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA Process not Found Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root Process not Found Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing Process not Found Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople Process not Found Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA Process not Found Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing Process not Found Key created \REGISTRY\USER\.DEFAULT\Software\Policies Process not Found Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft Process not Found Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates Process not Found Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft Process not Found Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root Process not Found Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust Process not Found Key created \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\2a\52C64B7E Process not Found Key created \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache Process not Found Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed Process not Found Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople Process not Found Key created \REGISTRY\USER\.DEFAULT\Software Process not Found -
Suspicious use of AdjustPrivilegeToken 16 IoCs
description pid Process Token: SeCreateGlobalPrivilege 9668 Process not Found Token: SeChangeNotifyPrivilege 9668 Process not Found Token: 33 9668 Process not Found Token: SeIncBasePriorityPrivilege 9668 Process not Found Token: SeCreateGlobalPrivilege 16120 Process not Found Token: SeChangeNotifyPrivilege 16120 Process not Found Token: 33 16120 Process not Found Token: SeIncBasePriorityPrivilege 16120 Process not Found Token: SeCreateGlobalPrivilege 14148 Process not Found Token: SeChangeNotifyPrivilege 14148 Process not Found Token: 33 14148 Process not Found Token: SeIncBasePriorityPrivilege 14148 Process not Found Token: SeCreateGlobalPrivilege 17832 Process not Found Token: SeChangeNotifyPrivilege 17832 Process not Found Token: 33 17832 Process not Found Token: SeIncBasePriorityPrivilege 17832 Process not Found -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 1736 wrote to memory of 804 1736 Roblox_In_a_Nutshell.exe 83 PID 1736 wrote to memory of 804 1736 Roblox_In_a_Nutshell.exe 83 PID 804 wrote to memory of 4924 804 cmd.exe 85 PID 804 wrote to memory of 4924 804 cmd.exe 85 PID 804 wrote to memory of 4648 804 cmd.exe 86 PID 804 wrote to memory of 4648 804 cmd.exe 86 PID 4924 wrote to memory of 2736 4924 cmd.exe 87 PID 4924 wrote to memory of 2736 4924 cmd.exe 87 PID 4924 wrote to memory of 1208 4924 cmd.exe 88 PID 4924 wrote to memory of 1208 4924 cmd.exe 88 PID 4648 wrote to memory of 4036 4648 cmd.exe 89 PID 4648 wrote to memory of 4036 4648 cmd.exe 89 PID 4648 wrote to memory of 5104 4648 cmd.exe 90 PID 4648 wrote to memory of 5104 4648 cmd.exe 90 PID 1208 wrote to memory of 728 1208 cmd.exe 92 PID 1208 wrote to memory of 728 1208 cmd.exe 92 PID 4036 wrote to memory of 3064 4036 cmd.exe 91 PID 4036 wrote to memory of 3064 4036 cmd.exe 91 PID 1208 wrote to memory of 368 1208 cmd.exe 93 PID 1208 wrote to memory of 368 1208 cmd.exe 93 PID 2736 wrote to memory of 4356 2736 cmd.exe 94 PID 2736 wrote to memory of 4356 2736 cmd.exe 94 PID 4036 wrote to memory of 2196 4036 cmd.exe 95 PID 4036 wrote to memory of 2196 4036 cmd.exe 95 PID 2736 wrote to memory of 3788 2736 cmd.exe 96 PID 2736 wrote to memory of 3788 2736 cmd.exe 96 PID 3788 wrote to memory of 3268 3788 cmd.exe 97 PID 3788 wrote to memory of 3268 3788 cmd.exe 97 PID 3788 wrote to memory of 1184 3788 cmd.exe 98 PID 3788 wrote to memory of 1184 3788 cmd.exe 98 PID 728 wrote to memory of 5064 728 cmd.exe 99 PID 728 wrote to memory of 5064 728 cmd.exe 99 PID 728 wrote to memory of 4808 728 cmd.exe 100 PID 728 wrote to memory of 4808 728 cmd.exe 100 PID 3064 wrote to memory of 3980 3064 cmd.exe 101 PID 3064 wrote to memory of 3980 3064 cmd.exe 101 PID 3064 wrote to memory of 3724 3064 cmd.exe 102 PID 3064 wrote to memory of 3724 3064 cmd.exe 102 PID 368 wrote to memory of 4012 368 cmd.exe 103 PID 368 wrote to memory of 4012 368 cmd.exe 103 PID 368 wrote to memory of 2368 368 cmd.exe 104 PID 368 wrote to memory of 2368 368 cmd.exe 104 PID 1184 wrote to memory of 3740 1184 cmd.exe 105 PID 1184 wrote to memory of 3740 1184 cmd.exe 105 PID 1184 wrote to memory of 3136 1184 cmd.exe 106 PID 1184 wrote to memory of 3136 1184 cmd.exe 106 PID 2196 wrote to memory of 4224 2196 cmd.exe 107 PID 2196 wrote to memory of 4224 2196 cmd.exe 107 PID 2196 wrote to memory of 3476 2196 cmd.exe 108 PID 2196 wrote to memory of 3476 2196 cmd.exe 108 PID 5104 wrote to memory of 2160 5104 cmd.exe 109 PID 5104 wrote to memory of 2160 5104 cmd.exe 109 PID 3268 wrote to memory of 2816 3268 cmd.exe 110 PID 3268 wrote to memory of 2816 3268 cmd.exe 110 PID 5104 wrote to memory of 1244 5104 cmd.exe 111 PID 5104 wrote to memory of 1244 5104 cmd.exe 111 PID 4356 wrote to memory of 4044 4356 cmd.exe 112 PID 4356 wrote to memory of 4044 4356 cmd.exe 112 PID 4356 wrote to memory of 2512 4356 cmd.exe 113 PID 4356 wrote to memory of 2512 4356 cmd.exe 113 PID 3268 wrote to memory of 3544 3268 cmd.exe 114 PID 3268 wrote to memory of 3544 3268 cmd.exe 114 PID 4224 wrote to memory of 1556 4224 cmd.exe 115 PID 4224 wrote to memory of 1556 4224 cmd.exe 115
Processes
-
C:\Users\Admin\AppData\Local\Temp\Roblox_In_a_Nutshell.exe"C:\Users\Admin\AppData\Local\Temp\Roblox_In_a_Nutshell.exe"1⤵
- Adds Run key to start application
- Suspicious use of WriteProcessMemory
PID:1736 -
C:\Windows\SYSTEM32\cmd.execmd /c "Roblox In a Nutshell.bat"2⤵
- Suspicious use of WriteProcessMemory
PID:804 -
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""3⤵
- Suspicious use of WriteProcessMemory
PID:4924 -
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""4⤵
- Suspicious use of WriteProcessMemory
PID:2736 -
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""5⤵
- Suspicious use of WriteProcessMemory
PID:4356 -
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""6⤵PID:4044
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""7⤵PID:2956
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""8⤵PID:6612
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:12912
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:13620
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""8⤵PID:6624
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:9084
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:9092
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:15356
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:9444
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""7⤵PID:4056
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""8⤵PID:644
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:6828
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:8124
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:14132
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:14796
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:8588
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:13192
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:13768
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:6836
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:9044
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:15628
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:15740
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:9052
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:15484
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:12668
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""8⤵PID:4964
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:6844
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:9860
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:15492
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:12560
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:9888
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:7380
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:11084
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:11900
-
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""6⤵PID:2512
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""7⤵PID:3736
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""8⤵PID:6376
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:12920
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:12940
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:12044
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:13628
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""8⤵PID:6384
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:7456
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:9312
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:9332
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:7988
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:12960
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:13660
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""7⤵PID:5084
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""8⤵PID:6108
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:7472
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:10584
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:16316
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:16340
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:10984
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:7492
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:14380
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:14996
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""8⤵PID:6116
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:10732
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:11436
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:16300
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:16324
-
-
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""5⤵
- Suspicious use of WriteProcessMemory
PID:3788 -
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""6⤵
- Suspicious use of WriteProcessMemory
PID:3268 -
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""7⤵PID:2816
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""8⤵PID:3880
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:4300
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:5516
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:7048
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:12968
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:13668
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:7064
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:8720
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:14860
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:8756
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:11708
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:12308
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:5524
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:7552
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:11092
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:11892
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:16052
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:12696
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:7568
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:13508
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:14204
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:4432
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:6456
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:11500
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:12084
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:6464
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:11060
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:16356
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:11112
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:11924
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:12684
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:12576
-
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""8⤵PID:4472
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:5800
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:7544
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:10592
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:15308
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:11736
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:11000
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:7560
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:11108
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:11876
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:16100
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:12580
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:5812
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:6200
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:12624
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:13144
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:10688
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:13852
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:6240
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:12504
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:13052
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:12948
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:14016
-
-
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""7⤵PID:3544
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""8⤵PID:4948
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:3708
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:6260
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:11220
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:12012
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:16076
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:16164
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:6280
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:7240
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:9560
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:15304
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:9584
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:7264
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:10300
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:10640
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:4944
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:6736
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:7896
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:13404
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:14060
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:7908
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:12352
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:12936
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:6752
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:9744
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:9760
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:15352
-
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""8⤵PID:2688
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:6424
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:8640
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:13428
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:14084
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:9352
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:10608
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:11008
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:6432
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:11584
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:16224
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:16232
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:12248
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:16016
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:16148
-
-
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""6⤵
- Suspicious use of WriteProcessMemory
PID:1184 -
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""7⤵PID:3740
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""8⤵PID:1396
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:5172
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:9496
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:9520
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:5192
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:8816
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:15932
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:15468
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:9484
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""8⤵PID:2704
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:5472
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:8112
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:14180
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:11656
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:14836
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:8136
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:14948
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:5772
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:8992
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:15892
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:15416
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:9692
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""7⤵PID:3136
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""8⤵PID:3656
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:3212
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:6024
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:8388
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:13588
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:14276
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:8424
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:13596
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:14284
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:6032
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:8436
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:12360
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:12944
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:8476
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:14268
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:14924
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:4380
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:4072
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:6080
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:9120
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:15452
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:15552
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:9128
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:6096
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:8624
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:13436
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:14092
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:8676
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:14188
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:14844
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:1548
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:5080
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:5268
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:8176
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""14⤵PID:14148
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""15⤵PID:7652
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""14⤵PID:14804
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:8184
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""14⤵PID:14164
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""14⤵PID:14820
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:5276
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:9136
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:9144
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:632
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:6408
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:9880
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""14⤵PID:15656
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""14⤵PID:12172
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:9912
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""14⤵PID:13464
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""14⤵PID:11796
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:6912
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:10756
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:11460
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""14⤵PID:16260
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""14⤵PID:12732
-
-
-
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""8⤵PID:2836
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:2568
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:5348
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:6744
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:11852
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:16108
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:11096
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""14⤵PID:10680
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""14⤵PID:10572
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:12452
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:16036
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""14⤵PID:10672
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:16184
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""14⤵PID:10864
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""14⤵PID:8804
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:6768
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:12720
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:13372
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:12236
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:9624
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:5364
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:6320
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:9700
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:15876
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:15608
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:9712
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:6328
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:10696
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:11348
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:2332
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:4804
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:3088
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:6304
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:8556
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""14⤵PID:14372
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""14⤵PID:14988
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:8616
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""14⤵PID:12784
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""14⤵PID:13420
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:6312
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:7300
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""14⤵PID:8544
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""15⤵PID:14364
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""15⤵PID:14980
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""14⤵PID:8604
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""15⤵PID:12260
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""15⤵PID:12808
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:7888
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""14⤵PID:12368
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""15⤵PID:15372
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""15⤵PID:15524
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""14⤵PID:12952
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""15⤵PID:12964
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""15⤵PID:10976
-
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:5316
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:7812
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:12976
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:13676
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:7828
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:12992
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:13684
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:744
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:5536
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:7124
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:12268
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""14⤵PID:16012
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""14⤵PID:16140
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:12832
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""14⤵PID:13292
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""14⤵PID:13020
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:7188
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:12544
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:13092
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:5548
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:7876
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:10816
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:11656
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:8488
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:12344
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:12928
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""14⤵PID:11072
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""14⤵PID:11784
-
-
-
-
-
-
-
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""4⤵
- Suspicious use of WriteProcessMemory
PID:1208 -
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""5⤵
- Suspicious use of WriteProcessMemory
PID:728 -
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""6⤵PID:5064
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""7⤵PID:3660
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""8⤵PID:3604
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:5440
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:6072
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:8976
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:15908
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:15436
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:9004
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:6088
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:10748
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:15944
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:15996
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:11452
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:15532
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:12168
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:5448
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:8060
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:13492
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:14140
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:8088
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:14068
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:14756
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""8⤵PID:1976
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:1900
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:6124
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:11472
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:12072
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:6136
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:6984
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:11076
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:11908
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:16028
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:16132
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:7008
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:13360
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:14044
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:3224
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:1972
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:6492
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:9956
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:9996
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:14760
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:11836
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:6500
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:9404
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:14236
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""14⤵PID:14812
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:14900
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:9424
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:14908
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:1912
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:7020
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:14388
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:5088
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:15004
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:7036
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:13176
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:13752
-
-
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""7⤵PID:2076
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""8⤵PID:1620
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:5136
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:5676
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:9456
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:9464
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:14916
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:5684
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:9616
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:15320
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:10284
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:5340
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:8868
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:12888
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:13580
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:8920
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:12740
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:13380
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""8⤵PID:3764
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:4548
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:6812
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:9164
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:9180
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:13184
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:13760
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:7324
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:9236
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:11288
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:12040
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:9260
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:13460
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:14108
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:3680
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:5208
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:7224
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:8928
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:15336
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:8956
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:15916
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:15444
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:7272
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:11868
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:16044
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""14⤵PID:14076
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""14⤵PID:14116
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:16124
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:12468
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:5216
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:6352
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:6928
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:8080
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""14⤵PID:14052
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""14⤵PID:14748
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:8100
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""14⤵PID:14156
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""14⤵PID:14812
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:6948
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:8596
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""14⤵PID:14764
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:9324
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""14⤵PID:14784
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""14⤵PID:11724
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:6360
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:10740
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:15560
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:15588
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:11444
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:16240
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""14⤵PID:13892
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""14⤵PID:9576
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:16248
-
-
-
-
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""6⤵PID:4808
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""7⤵PID:1916
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""8⤵PID:448
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:5596
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:7704
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:13604
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:14292
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:7712
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:10656
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:11188
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:14356
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:13060
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:5604
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:9448
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:10172
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""8⤵PID:2464
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:5836
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:11052
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:11932
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:6184
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:12616
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:13136
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""7⤵PID:4032
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""8⤵PID:3548
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:5880
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:8736
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:11700
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:11344
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:13988
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:12300
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:14548
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:14020
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:8764
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:14220
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:12228
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:9960
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:14876
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:5888
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:8300
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:8836
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:8904
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:14940
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:8800
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""8⤵PID:2056
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:5856
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:9528
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:9572
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:15312
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:5868
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:7172
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:12872
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:13564
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:7212
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:7840
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:13016
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:13704
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:8452
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:9596
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:9608
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:15924
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""14⤵PID:14000
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:15476
-
-
-
-
-
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""5⤵
- Suspicious use of WriteProcessMemory
PID:368 -
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""6⤵PID:4012
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""7⤵PID:1876
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""8⤵PID:5284
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:6668
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:11748
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:12492
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:6688
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:10632
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:13536
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:10168
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:11320
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:13120
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:11668
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""8⤵PID:5372
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:6720
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:11860
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:12460
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:6728
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:9676
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:15900
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:15428
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:9684
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:15884
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:15412
-
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""7⤵PID:4460
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""8⤵PID:3684
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:5612
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:8244
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:14868
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:8692
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:5628
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:10600
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:10992
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""8⤵PID:2024
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:5308
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:7204
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:13572
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:14260
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:7256
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:9632
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:9640
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:5332
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:5952
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:9416
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:14892
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:10140
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:5968
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:8772
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:8784
-
-
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""6⤵PID:2368
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""7⤵PID:3172
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""8⤵PID:3112
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:5692
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:7728
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:13324
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:13992
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:7736
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:13612
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:14308
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:5700
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:9508
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:15328
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:9544
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:15296
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""8⤵PID:4272
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:7116
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:7612
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:12860
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:13524
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:13848
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:13972
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:8256
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:11940
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:12476
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:16004
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:16116
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:7180
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:12512
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:13060
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""7⤵PID:3360
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""8⤵PID:4556
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:5780
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:10724
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:15568
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:15304
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:11428
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:16292
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:16308
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:5788
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:6168
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:9228
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:12816
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:13468
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:9248
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:12824
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:13476
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:6476
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:7576
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:11644
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:12280
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:7584
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:10792
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:15292
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:11616
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:11620
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:16200
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:12588
-
-
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""8⤵PID:4080
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:6852
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:9840
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:15460
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:11056
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:9852
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:15636
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:15756
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:6860
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:9192
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:15012
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:9200
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:12792
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:13452
-
-
-
-
-
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""3⤵
- Suspicious use of WriteProcessMemory
PID:4648 -
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""4⤵
- Suspicious use of WriteProcessMemory
PID:4036 -
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""5⤵
- Suspicious use of WriteProcessMemory
PID:3064 -
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""6⤵PID:3980
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""7⤵PID:2564
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""8⤵PID:2144
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:3532
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:7308
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:8144
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:10780
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:11600
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:16208
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:16216
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:8160
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:10868
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:11740
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:7316
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:8576
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:13332
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:14000
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:8648
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:14772
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:2928
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:6820
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:9156
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:13352
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:14036
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:9172
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:12748
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:13392
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:7332
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:9972
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:10008
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:16332
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:16348
-
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""8⤵PID:4604
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:6788
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:13340
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:14024
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:6800
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:9032
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:15620
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:12436
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:9752
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:15344
-
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""7⤵PID:2696
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""8⤵PID:4736
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:5056
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:7420
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:13644
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:14324
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:7432
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:14332
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:14964
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:4668
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:6968
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:8152
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:10152
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:11016
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:15772
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:10200
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:8168
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:14956
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:15196
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:6976
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:11068
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:11916
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:16084
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:16180
-
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""8⤵PID:2256
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:5464
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:7448
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:10020
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:10044
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:7980
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:9064
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:15648
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:12088
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:9072
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:10800
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:5764
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:10716
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:11388
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:15752
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:11608
-
-
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""6⤵PID:3724
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""7⤵PID:3796
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""8⤵PID:2036
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:3056
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:5404
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:9816
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:14436
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:15048
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:11712
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:10892
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:9824
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:5412
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:9796
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:14420
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:15032
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:9804
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:14428
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:15040
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:5124
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:6540
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:10164
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:10504
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:6556
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:10252
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:15404
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:15544
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:10552
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:4496
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:10204
-
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""8⤵PID:3520
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:5580
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:10624
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:11036
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:5588
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:10616
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:11016
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""7⤵PID:2628
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""8⤵PID:4860
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:4412
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:6632
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:7620
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:8324
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:14884
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""14⤵PID:13652
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:8828
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:12520
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""14⤵PID:14484
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""14⤵PID:13976
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:13068
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""14⤵PID:14672
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""14⤵PID:13820
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:7640
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:12320
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:16092
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:12160
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:12880
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:7144
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:10180
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:10512
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:15716
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:15264
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:4732
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:4824
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:6548
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:9440
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:10188
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:15364
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:9336
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:7088
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:8712
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:11692
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""14⤵PID:16376
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""14⤵PID:12600
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:12292
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:8744
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:13540
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:14228
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:4612
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:7628
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:13532
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:14212
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:7648
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:10212
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:10532
-
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""8⤵PID:4436
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:6940
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:8196
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:14172
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:14920
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:10816
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:14828
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:8204
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:14196
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:10736
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:14852
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:6960
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:9208
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:12800
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:13444
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:9928
-
-
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""5⤵
- Suspicious use of WriteProcessMemory
PID:2196 -
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""6⤵
- Suspicious use of WriteProcessMemory
PID:4224 -
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""7⤵PID:1556
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""8⤵PID:1980
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:5992
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:7776
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:12404
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:13000
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:7796
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:12412
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:13008
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:6012
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:9624
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:10292
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""8⤵PID:4840
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:5744
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:10688
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:11340
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:5756
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:9896
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:10808
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:11816
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:9920
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:13608
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:11684
-
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""7⤵PID:2272
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""8⤵PID:876
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:5560
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:7852
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:13652
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:14344
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:7864
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:13692
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:14352
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:5568
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:8848
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:15280
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:8912
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:14300
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:14932
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""8⤵PID:3840
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:3676
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:3748
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:5144
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:10840
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:11728
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:5324
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:8364
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:12528
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""14⤵PID:13864
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""14⤵PID:11820
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:13076
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""14⤵PID:11008
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""14⤵PID:9104
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:8376
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:11844
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:12444
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:1292
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:8344
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:12336
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:12904
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:8356
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:15288
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:2708
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:3160
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:6592
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:9100
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:9112
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:6600
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:8940
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:3672
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:11652
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:8964
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:15616
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:15540
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:340
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:6004
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:11948
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:15244
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""13⤵PID:9148
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:12484
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:6248
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:12328
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:12896
-
-
-
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""6⤵PID:3476
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""7⤵PID:4176
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""8⤵PID:5896
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:7756
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:9780
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:5088
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:9788
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:13200
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:14360
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:8852
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:13212
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:14540
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:10916
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:7768
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:12396
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:16060
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:10520
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:13412
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:16156
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:12984
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:14568
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:13720
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""8⤵PID:5904
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:6576
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:12840
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:13500
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:6584
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:9368
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:9388
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:13548
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:14244
-
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""7⤵PID:1340
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""8⤵PID:1780
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:6640
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:12852
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:13516
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:6652
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:12536
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:13084
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:9956
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:9632
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""8⤵PID:1436
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:5920
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:10104
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:10112
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:15720
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:15272
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:5928
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:7680
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:13556
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:14252
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:13096
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:12640
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:7692
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:13116
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:13168
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:14668
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""12⤵PID:11048
-
-
-
-
-
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""4⤵
- Suspicious use of WriteProcessMemory
PID:5104 -
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""5⤵PID:2160
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""6⤵PID:4708
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""7⤵PID:5228
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""8⤵PID:10708
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:15536
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""8⤵PID:11380
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""7⤵PID:5240
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""8⤵PID:5488
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:8632
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:13412
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:14076
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:8684
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""8⤵PID:5500
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:6992
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:9288
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:14100
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:14780
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:9304
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:14116
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""11⤵PID:14788
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:7000
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:10036
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:10412
-
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""6⤵PID:4440
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""7⤵PID:6044
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""8⤵PID:7348
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:9272
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:14972
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:9296
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:13484
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:14124
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""8⤵PID:7364
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:13636
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:14316
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""7⤵PID:6052
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""8⤵PID:11100
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""8⤵PID:11884
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:16068
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""10⤵PID:9468
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""9⤵PID:16172
-
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""5⤵PID:1244
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""6⤵PID:6660
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""7⤵PID:12552
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""7⤵PID:13100
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""6⤵PID:7156
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""7⤵PID:16368
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /S /D /c" "Roblox In a Nutshell.bat""7⤵PID:12128
-
-
-
-
-
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
11B
MD5df9ee5c56a92a1ddda19fcc2ea6648e9
SHA1156795a041e035304bb8aafc1e9e3ff5931ef415
SHA2565613b60363c2eadcf23e8c2f8de51e9fcc005a51b99887b133f723b724fd00a1
SHA51254d33a7e1d452eeadcaca041f7f82d61e173aa2b71037a69affd5307e5006a1bdb0b8fa70efe3ef136c92d9956c002ff0dea1d69e7e0c197f31fab59755d3f2c