3b3ba5d145a01d7cd0f6c783acb41d515ebfd1dd275bf8d21a98b16317948dea

Analysis

max time kernel
22s
max time network
23s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
23/06/2024, 23:13

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Biohazard IP Pinger.bat
Size

6KB
MD5

151f990bf67a846fafb869fbea42a557
SHA1

403be2e24715df9fe6aa5336f92e3b26c7c3ffbb
SHA256

3b3ba5d145a01d7cd0f6c783acb41d515ebfd1dd275bf8d21a98b16317948dea
SHA512

ab9745de633de7e07361af81e75a74720a51d21841d46bf2dc6b002bac74cda240d16a6730d8f8df059316bc2ad96b3ab763bd108ea9bdb1c53a6b93e7dfb2ad
SSDEEP

96:yZYbyHdgZTXtHAZYbyHGZTXtH+E9WP8Hvf:U+2SeEYkvf

Score

1^/10

Malware Config

Signatures

Delays execution with timeout.exe 1 IoCs

evasion

pid	Process
2920	timeout.exe

Runs ping.exe 1 TTPs 64 IoCs

Remote System Discovery

T1018

pid	Process
3644	PING.EXE
2292	PING.EXE
4328	PING.EXE
3680	PING.EXE
3328	PING.EXE
2160	PING.EXE
1396	PING.EXE
4928	PING.EXE
2336	PING.EXE
1240	PING.EXE
3512	PING.EXE
4796	PING.EXE
4548	PING.EXE
2812	PING.EXE
3696	PING.EXE
5080	PING.EXE
2180	PING.EXE
4496	PING.EXE
2884	PING.EXE
4416	PING.EXE
4640	PING.EXE
4284	PING.EXE
4220	PING.EXE
1624	PING.EXE
4652	PING.EXE
3512	PING.EXE
2596	PING.EXE
4036	PING.EXE
2884	PING.EXE
2892	PING.EXE
1820	PING.EXE
2256	PING.EXE
4444	PING.EXE
3148	PING.EXE
2724	PING.EXE
3096	PING.EXE
4460	PING.EXE
4020	PING.EXE
2188	PING.EXE
3868	PING.EXE
1832	PING.EXE
4428	PING.EXE
212	PING.EXE
1652	PING.EXE
1056	PING.EXE
2420	PING.EXE
1156	PING.EXE
4900	PING.EXE
1044	PING.EXE
4476	PING.EXE
4220	PING.EXE
1784	PING.EXE
1048	PING.EXE
2844	PING.EXE
1184	PING.EXE
3636	PING.EXE
4480	PING.EXE
1156	PING.EXE
2388	PING.EXE
1004	PING.EXE
3264	PING.EXE
3408	PING.EXE
3560	PING.EXE
1528	PING.EXE

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4628 wrote to memory of 4836	4628	cmd.exe	84
PID 4628 wrote to memory of 4836	4628	cmd.exe	84
PID 4628 wrote to memory of 4448	4628	cmd.exe	85
PID 4628 wrote to memory of 4448	4628	cmd.exe	85
PID 4628 wrote to memory of 2428	4628	cmd.exe	86
PID 4628 wrote to memory of 2428	4628	cmd.exe	86
PID 4628 wrote to memory of 1820	4628	cmd.exe	87
PID 4628 wrote to memory of 1820	4628	cmd.exe	87
PID 4628 wrote to memory of 1996	4628	cmd.exe	88
PID 4628 wrote to memory of 1996	4628	cmd.exe	88
PID 4628 wrote to memory of 4416	4628	cmd.exe	89
PID 4628 wrote to memory of 4416	4628	cmd.exe	89
PID 4628 wrote to memory of 4592	4628	cmd.exe	90
PID 4628 wrote to memory of 4592	4628	cmd.exe	90
PID 4628 wrote to memory of 2920	4628	cmd.exe	91
PID 4628 wrote to memory of 2920	4628	cmd.exe	91
PID 4628 wrote to memory of 1176	4628	cmd.exe	92
PID 4628 wrote to memory of 1176	4628	cmd.exe	92
PID 4628 wrote to memory of 4072	4628	cmd.exe	93
PID 4628 wrote to memory of 4072	4628	cmd.exe	93
PID 4628 wrote to memory of 3096	4628	cmd.exe	94
PID 4628 wrote to memory of 3096	4628	cmd.exe	94
PID 4628 wrote to memory of 1200	4628	cmd.exe	95
PID 4628 wrote to memory of 1200	4628	cmd.exe	95
PID 4628 wrote to memory of 220	4628	cmd.exe	96
PID 4628 wrote to memory of 220	4628	cmd.exe	96
PID 4628 wrote to memory of 3708	4628	cmd.exe	97
PID 4628 wrote to memory of 3708	4628	cmd.exe	97
PID 4628 wrote to memory of 3008	4628	cmd.exe	98
PID 4628 wrote to memory of 3008	4628	cmd.exe	98
PID 4628 wrote to memory of 3236	4628	cmd.exe	99
PID 4628 wrote to memory of 3236	4628	cmd.exe	99
PID 4628 wrote to memory of 2572	4628	cmd.exe	100
PID 4628 wrote to memory of 2572	4628	cmd.exe	100
PID 4628 wrote to memory of 3576	4628	cmd.exe	101
PID 4628 wrote to memory of 3576	4628	cmd.exe	101
PID 4628 wrote to memory of 2700	4628	cmd.exe	102
PID 4628 wrote to memory of 2700	4628	cmd.exe	102
PID 4628 wrote to memory of 1992	4628	cmd.exe	103
PID 4628 wrote to memory of 1992	4628	cmd.exe	103
PID 4628 wrote to memory of 5068	4628	cmd.exe	104
PID 4628 wrote to memory of 5068	4628	cmd.exe	104
PID 4628 wrote to memory of 3512	4628	cmd.exe	105
PID 4628 wrote to memory of 3512	4628	cmd.exe	105
PID 4628 wrote to memory of 4300	4628	cmd.exe	106
PID 4628 wrote to memory of 4300	4628	cmd.exe	106
PID 4628 wrote to memory of 4472	4628	cmd.exe	107
PID 4628 wrote to memory of 4472	4628	cmd.exe	107
PID 4628 wrote to memory of 1652	4628	cmd.exe	108
PID 4628 wrote to memory of 1652	4628	cmd.exe	108
PID 4628 wrote to memory of 2024	4628	cmd.exe	109
PID 4628 wrote to memory of 2024	4628	cmd.exe	109
PID 4628 wrote to memory of 3580	4628	cmd.exe	110
PID 4628 wrote to memory of 3580	4628	cmd.exe	110
PID 4628 wrote to memory of 5044	4628	cmd.exe	111
PID 4628 wrote to memory of 5044	4628	cmd.exe	111
PID 4628 wrote to memory of 3496	4628	cmd.exe	112
PID 4628 wrote to memory of 3496	4628	cmd.exe	112
PID 4628 wrote to memory of 3684	4628	cmd.exe	113
PID 4628 wrote to memory of 3684	4628	cmd.exe	113
PID 4628 wrote to memory of 3968	4628	cmd.exe	114
PID 4628 wrote to memory of 3968	4628	cmd.exe	114
PID 4628 wrote to memory of 1504	4628	cmd.exe	115
PID 4628 wrote to memory of 1504	4628	cmd.exe	115

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Biohazard IP Pinger.bat"
1⤵
- Suspicious use of WriteProcessMemory
PID:4628
- C:\Windows\system32\mode.com
  mode con lines=35 cols=60
  2⤵
  PID:4836
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  PID:4448
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  PID:2428
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  - Runs ping.exe
  PID:1820
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  PID:1996
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  - Runs ping.exe
  PID:4416
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  PID:4592
- C:\Windows\system32\timeout.exe
  timeout
  2⤵
  - Delays execution with timeout.exe
  PID:2920
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  PID:1176
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  PID:4072
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  - Runs ping.exe
  PID:3096
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  PID:1200
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  PID:220
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  PID:3708
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  PID:3008
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  PID:3236
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  PID:2572
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:3576
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:2700
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  PID:1992
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:5068
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  - Runs ping.exe
  PID:3512
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  PID:4300
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:4472
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:1652
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  PID:2024
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:3580
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:5044
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  PID:3496
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:3684
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:3968
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  PID:1504
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:948
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:1808
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  PID:2624
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:3472
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:2812
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  PID:4992
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:4700
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  - Runs ping.exe
  PID:4220
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  - Runs ping.exe
  PID:5080
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:1180
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:3976
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  PID:3768
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:1120
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  - Runs ping.exe
  PID:1624
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  - Runs ping.exe
  PID:1156
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:2200
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:4648
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  - Runs ping.exe
  PID:3868
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:1620
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:1056
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  - Runs ping.exe
  PID:1004
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:844
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:4108
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  PID:2368
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:2412
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:316
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  - Runs ping.exe
  PID:2256
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:2916
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:3360
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  PID:1532
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:4668
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  - Runs ping.exe
  PID:3696
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  PID:1196
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:3764
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:1028
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  - Runs ping.exe
  PID:3644
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:1108
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:384
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  PID:3176
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:4132
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  - Runs ping.exe
  PID:4796
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  PID:4364
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:4604
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:2928
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  PID:2016
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:1060
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:3336
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  - Runs ping.exe
  PID:3264
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:3276
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:1908
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  PID:3996
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:2316
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:3960
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  PID:3620
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:4540
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  - Runs ping.exe
  PID:4428
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  PID:4872
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:4672
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:2076
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  PID:3388
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:4836
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  - Runs ping.exe
  PID:2160
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  PID:2428
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:5060
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  - Runs ping.exe
  PID:2292
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  - Runs ping.exe
  PID:212
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:4516
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:4592
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  PID:4708
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:4044
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:2836
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  PID:1860
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:1832
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  - Runs ping.exe
  PID:1784
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  PID:3124
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:2968
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:116
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  PID:2696
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:4036
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:1824
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  PID:4088
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:1556
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:624
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  PID:1340
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:2572
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  - Runs ping.exe
  PID:2180
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  PID:3328
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:2784
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:448
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  PID:3932
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:2156
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:2060
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  PID:2004
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:5084
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  - Runs ping.exe
  PID:4496
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  PID:3496
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:3692
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:5076
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  PID:3088
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:3344
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:3116
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  - Runs ping.exe
  PID:4444
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:2668
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:4104
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  PID:908
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:4548
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:2072
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  PID:5080
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:764
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:1512
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  PID:3768
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:1396
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:1528
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  - Runs ping.exe
  PID:4652
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:4928
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  - Runs ping.exe
  PID:4900
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  PID:3140
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:3380
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:1776
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  PID:2856
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:4064
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  - Runs ping.exe
  PID:4460
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  - Runs ping.exe
  PID:3636
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:1124
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  - Runs ping.exe
  PID:3408
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  PID:3028
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:2256
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:3032
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  PID:3320
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:1532
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:3840
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  - Runs ping.exe
  PID:3148
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:1196
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:2176
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  PID:1172
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:3644
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:3372
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  PID:2972
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:3376
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:2268
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  PID:1796
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:4364
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:3756
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  PID:872
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:4380
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  - Runs ping.exe
  PID:4020
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  PID:1508
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:4568
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:3588
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  - Runs ping.exe
  PID:4480
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:856
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:4440
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  PID:4424
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:4432
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:1736
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  - Runs ping.exe
  PID:1048
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:2192
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:5008
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  PID:404
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:3388
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:2160
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  PID:224
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:3092
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:4820
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  PID:4416
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:4308
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:1176
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  PID:4400
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:2224
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:3096
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  - Runs ping.exe
  PID:4328
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:1860
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:1928
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  PID:1088
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:2440
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:5116
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  PID:3708
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:2780
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  - Runs ping.exe
  PID:4640
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  - Runs ping.exe
  PID:3560
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:3608
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:624
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  PID:2444
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:4908
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:1340
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  - Runs ping.exe
  PID:3512
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:5068
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:3172
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  - Runs ping.exe
  PID:1652
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:4300
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  - Runs ping.exe
  PID:2844
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  PID:5044
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:3580
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  - Runs ping.exe
  PID:3680
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  PID:1800
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:5052
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:4008
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  PID:4204
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:1808
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  - Runs ping.exe
  PID:2724
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  PID:4500
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:2624
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:2668
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  PID:4104
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:4992
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  - Runs ping.exe
  PID:4548
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  PID:2072
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:4892
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:764
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  PID:1512
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:4024
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  - Runs ping.exe
  PID:1396
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  - Runs ping.exe
  PID:1528
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:1156
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  - Runs ping.exe
  PID:4928
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  PID:4900
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:1184
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:1620
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  - Runs ping.exe
  PID:2388
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:2420
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:1216
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  PID:3228
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:4476
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:1656
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  - Runs ping.exe
  PID:2884
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:2916
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  - Runs ping.exe
  PID:1044
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  PID:3216
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:4668
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:4144
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  - Runs ping.exe
  PID:4284
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:3764
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:2656
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  - Runs ping.exe
  PID:2596
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:544
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:1108
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  PID:2652
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:2424
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:920
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  PID:3652
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:1464
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:1796
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  PID:4372
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:4248
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:872
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  PID:4988
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:3532
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:1508
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  PID:2620
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:3820
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:3204
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  PID:4484
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:4508
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:4424
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  PID:2280
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:432
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:3296
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  PID:2076
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:2192
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  - Runs ping.exe
  PID:2336
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  PID:404
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:4836
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:2476
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  PID:224
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:5060
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:4516
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  PID:216
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:4704
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:4708
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  PID:4048
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:4400
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  - Runs ping.exe
  PID:1832
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  - Runs ping.exe
  PID:1240
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:4328
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:2968
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  PID:468
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:1088
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  - Runs ping.exe
  PID:4036
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  PID:4360
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:3708
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:1556
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  - Runs ping.exe
  PID:2892
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:4272
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:4860
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  - Runs ping.exe
  PID:2188
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:2444
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:3252
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  - Runs ping.exe
  PID:3328
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:3512
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:4472
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  PID:3120
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:2156
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:3828
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  PID:1316
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:5044
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:2040
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  PID:744
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:1800
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:1136
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  PID:1344
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:4204
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:3508
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  - Runs ping.exe
  PID:2812
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:4500
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:4700
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  - Runs ping.exe
  PID:4220
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:4104
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:3348
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  PID:3664
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:4712
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:2072
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  PID:4892
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:2384
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:5036
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  PID:4024
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:2832
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:1528
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  - Runs ping.exe
  PID:1156
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:4580
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  - Runs ping.exe
  PID:1056
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  - Runs ping.exe
  PID:1184
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:3380
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:4108
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  - Runs ping.exe
  PID:2420
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:4064
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:316
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  - Runs ping.exe
  PID:4476
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:1852
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  - Runs ping.exe
  PID:2884
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  PID:2916
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:2256
- C:\Windows\system32\PING.EXE
  ping -t 2 0 10 127.0.0.1
  2⤵
  PID:3244
- C:\Windows\system32\PING.EXE
  PING -n 1 127.0.0.1
  2⤵
  PID:4668
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:2828

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Remote System Discovery

T1018

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads