f40cdbed7c086e579a3030cb11d25f82eb679f169d5d2dc73b709f1721e7ffcb

Analysis

max time kernel
60s
max time network
35s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
10/08/2024, 16:09

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Crystalpinger.bat
Size

1KB
MD5

e622222dfe2e8a1f98ca7101566382e3
SHA1

59690a6de7014dfd8c4dcdaf7fe3b19ca27078ad
SHA256

f40cdbed7c086e579a3030cb11d25f82eb679f169d5d2dc73b709f1721e7ffcb
SHA512

6f7c2c14e3d7aba31eb850c478f5b2abf3adacf6602f39d974bf891937b3028364af68ca64dc10fbe8dba57f74a08a922b82c14226ce38ed678ee7da29392d98

Score

3^/10

discovery

Malware Config

Signatures

System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 64 IoCs

Adversaries may check for Internet connectivity on compromised systems.

discovery

Internet Connection Discovery

T1016.001

pid	Process
1280	PING.EXE
1928	PING.EXE
4712	PING.EXE
3980	PING.EXE
2656	PING.EXE
3768	PING.EXE
3944	PING.EXE
532	PING.EXE
2920	PING.EXE
4924	PING.EXE
1476	PING.EXE
3452	PING.EXE
2240	PING.EXE
2992	PING.EXE
3728	PING.EXE
3924	PING.EXE
3376	PING.EXE
4556	PING.EXE
2444	PING.EXE
2020	PING.EXE
2728	PING.EXE
368	PING.EXE
2052	PING.EXE
3480	PING.EXE
2316	PING.EXE
1900	PING.EXE
4816	PING.EXE
4316	PING.EXE
3404	PING.EXE
924	PING.EXE
2904	PING.EXE
3864	PING.EXE
3680	PING.EXE
3944	PING.EXE
1428	PING.EXE
700	PING.EXE
4700	PING.EXE
1576	PING.EXE
4808	PING.EXE
3004	PING.EXE
2240	PING.EXE
3664	PING.EXE
3648	PING.EXE
4340	PING.EXE
4560	PING.EXE
5088	PING.EXE
3172	PING.EXE
4828	PING.EXE
4012	PING.EXE
4556	PING.EXE
1940	PING.EXE
208	PING.EXE
2352	PING.EXE
1476	PING.EXE
3524	PING.EXE
4024	PING.EXE
3664	PING.EXE
1788	PING.EXE
3616	PING.EXE
2124	PING.EXE
1384	PING.EXE
3172	PING.EXE
2140	PING.EXE
4224	PING.EXE

Runs ping.exe 1 TTPs 64 IoCs

Remote System Discovery

T1018

pid	Process
4700	PING.EXE
4324	PING.EXE
4420	PING.EXE
3980	PING.EXE
4824	PING.EXE
3924	PING.EXE
3960	PING.EXE
4624	PING.EXE
700	PING.EXE
1496	PING.EXE
1132	PING.EXE
3408	PING.EXE
1516	PING.EXE
3576	PING.EXE
4556	PING.EXE
1928	PING.EXE
3936	PING.EXE
3524	PING.EXE
3376	PING.EXE
3324	PING.EXE
376	PING.EXE
2448	PING.EXE
1392	PING.EXE
3820	PING.EXE
4712	PING.EXE
4664	PING.EXE
5088	PING.EXE
1900	PING.EXE
2020	PING.EXE
3944	PING.EXE
3620	PING.EXE
4956	PING.EXE
4956	PING.EXE
4352	PING.EXE
3688	PING.EXE
3924	PING.EXE
2736	PING.EXE
788	PING.EXE
2012	PING.EXE
3444	PING.EXE
1476	PING.EXE
3648	PING.EXE
3924	PING.EXE
2140	PING.EXE
4700	PING.EXE
3600	PING.EXE
3944	PING.EXE
3600	PING.EXE
208	PING.EXE
2340	PING.EXE
2288	PING.EXE
5088	PING.EXE
3820	PING.EXE
836	PING.EXE
1292	PING.EXE
1060	PING.EXE
1280	PING.EXE
1428	PING.EXE
4344	PING.EXE
4224	PING.EXE
4220	PING.EXE
3588	PING.EXE
2052	PING.EXE
3856	PING.EXE

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1608 wrote to memory of 3232	1608	cmd.exe	85
PID 1608 wrote to memory of 3232	1608	cmd.exe	85
PID 1608 wrote to memory of 3636	1608	cmd.exe	98
PID 1608 wrote to memory of 3636	1608	cmd.exe	98
PID 1608 wrote to memory of 2768	1608	cmd.exe	99
PID 1608 wrote to memory of 2768	1608	cmd.exe	99
PID 1608 wrote to memory of 1428	1608	cmd.exe	100
PID 1608 wrote to memory of 1428	1608	cmd.exe	100
PID 1608 wrote to memory of 1900	1608	cmd.exe	101
PID 1608 wrote to memory of 1900	1608	cmd.exe	101
PID 1608 wrote to memory of 4556	1608	cmd.exe	102
PID 1608 wrote to memory of 4556	1608	cmd.exe	102
PID 1608 wrote to memory of 3820	1608	cmd.exe	103
PID 1608 wrote to memory of 3820	1608	cmd.exe	103
PID 1608 wrote to memory of 3864	1608	cmd.exe	105
PID 1608 wrote to memory of 3864	1608	cmd.exe	105
PID 1608 wrote to memory of 4224	1608	cmd.exe	106
PID 1608 wrote to memory of 4224	1608	cmd.exe	106
PID 1608 wrote to memory of 4940	1608	cmd.exe	107
PID 1608 wrote to memory of 4940	1608	cmd.exe	107
PID 1608 wrote to memory of 1636	1608	cmd.exe	108
PID 1608 wrote to memory of 1636	1608	cmd.exe	108
PID 1608 wrote to memory of 1444	1608	cmd.exe	109
PID 1608 wrote to memory of 1444	1608	cmd.exe	109
PID 1608 wrote to memory of 3608	1608	cmd.exe	110
PID 1608 wrote to memory of 3608	1608	cmd.exe	110
PID 1608 wrote to memory of 2260	1608	cmd.exe	111
PID 1608 wrote to memory of 2260	1608	cmd.exe	111
PID 1608 wrote to memory of 3944	1608	cmd.exe	112
PID 1608 wrote to memory of 3944	1608	cmd.exe	112
PID 1608 wrote to memory of 844	1608	cmd.exe	113
PID 1608 wrote to memory of 844	1608	cmd.exe	113
PID 1608 wrote to memory of 3668	1608	cmd.exe	114
PID 1608 wrote to memory of 3668	1608	cmd.exe	114
PID 1608 wrote to memory of 2204	1608	cmd.exe	115
PID 1608 wrote to memory of 2204	1608	cmd.exe	115
PID 1608 wrote to memory of 3616	1608	cmd.exe	116
PID 1608 wrote to memory of 3616	1608	cmd.exe	116
PID 1608 wrote to memory of 4792	1608	cmd.exe	117
PID 1608 wrote to memory of 4792	1608	cmd.exe	117
PID 1608 wrote to memory of 1700	1608	cmd.exe	118
PID 1608 wrote to memory of 1700	1608	cmd.exe	118
PID 1608 wrote to memory of 1720	1608	cmd.exe	119
PID 1608 wrote to memory of 1720	1608	cmd.exe	119
PID 1608 wrote to memory of 4136	1608	cmd.exe	120
PID 1608 wrote to memory of 4136	1608	cmd.exe	120
PID 1608 wrote to memory of 3232	1608	cmd.exe	121
PID 1608 wrote to memory of 3232	1608	cmd.exe	121
PID 1608 wrote to memory of 3612	1608	cmd.exe	122
PID 1608 wrote to memory of 3612	1608	cmd.exe	122
PID 1608 wrote to memory of 3404	1608	cmd.exe	123
PID 1608 wrote to memory of 3404	1608	cmd.exe	123
PID 1608 wrote to memory of 1016	1608	cmd.exe	125
PID 1608 wrote to memory of 1016	1608	cmd.exe	125
PID 1608 wrote to memory of 892	1608	cmd.exe	126
PID 1608 wrote to memory of 892	1608	cmd.exe	126
PID 1608 wrote to memory of 2140	1608	cmd.exe	127
PID 1608 wrote to memory of 2140	1608	cmd.exe	127
PID 1608 wrote to memory of 1256	1608	cmd.exe	128
PID 1608 wrote to memory of 1256	1608	cmd.exe	128
PID 1608 wrote to memory of 2236	1608	cmd.exe	129
PID 1608 wrote to memory of 2236	1608	cmd.exe	129
PID 1608 wrote to memory of 536	1608	cmd.exe	130
PID 1608 wrote to memory of 536	1608	cmd.exe	130

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Crystalpinger.bat"
1⤵
- Suspicious use of WriteProcessMemory
PID:1608
- C:\Windows\system32\mode.com
  mode con cols=65 lines=33
  2⤵
  PID:3232
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  PID:3636
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  PID:2768
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:1428
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  PID:1900
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  - System Network Configuration Discovery: Internet Connection Discovery
  PID:4556
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:3820
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  - System Network Configuration Discovery: Internet Connection Discovery
  PID:3864
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  - Runs ping.exe
  PID:4224
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:4940
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  PID:1636
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  PID:1444
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:3608
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  PID:2260
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  - System Network Configuration Discovery: Internet Connection Discovery
  - Runs ping.exe
  PID:3944
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:844
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  PID:3668
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  PID:2204
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:3616
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  PID:4792
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  PID:1700
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:1720
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  PID:4136
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  PID:3232
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:3612
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  - System Network Configuration Discovery: Internet Connection Discovery
  PID:3404
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  PID:1016
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:892
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  - System Network Configuration Discovery: Internet Connection Discovery
  PID:2140
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  PID:1256
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:2236
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  PID:536
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  PID:924
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:4412
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  PID:1984
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  PID:1588
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:3332
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  PID:2692
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  PID:1232
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:2336
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  - System Network Configuration Discovery: Internet Connection Discovery
  PID:2728
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  PID:2364
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:3692
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  - Runs ping.exe
  PID:3936
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  PID:3980
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:3408
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  PID:684
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  PID:4512
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:2284
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  - System Network Configuration Discovery: Internet Connection Discovery
  PID:4024
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  PID:1544
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:772
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  PID:1988
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  - System Network Configuration Discovery: Internet Connection Discovery
  PID:2992
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:1068
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  PID:1364
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  - System Network Configuration Discovery: Internet Connection Discovery
  PID:4560
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:2448
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  PID:3480
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  - Runs ping.exe
  PID:3924
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:3920
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  PID:2852
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  - System Network Configuration Discovery: Internet Connection Discovery
  PID:2240
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:2052
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  PID:1052
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  PID:4808
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:4320
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  PID:4324
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  PID:3180
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:4620
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  - Runs ping.exe
  PID:1392
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  PID:816
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:1264
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  PID:3132
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  - System Network Configuration Discovery: Internet Connection Discovery
  PID:3004
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:2936
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  PID:2128
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  - System Network Configuration Discovery: Internet Connection Discovery
  - Runs ping.exe
  PID:3524
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:2940
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  PID:448
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  PID:2492
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:3052
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  - Runs ping.exe
  PID:3648
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  PID:4456
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:2692
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  PID:4872
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  - Runs ping.exe
  PID:3620
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:3028
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  PID:2604
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  - System Network Configuration Discovery: Internet Connection Discovery
  PID:3664
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:1236
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  PID:3320
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  - System Network Configuration Discovery: Internet Connection Discovery
  PID:1788
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:980
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  PID:1920
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  PID:4912
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:3628
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  PID:2972
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  PID:4312
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:5024
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  - Runs ping.exe
  PID:4220
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  - Runs ping.exe
  PID:3600
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:1988
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  PID:4268
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  - System Network Configuration Discovery: Internet Connection Discovery
  PID:3172
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:2736
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  - System Network Configuration Discovery: Internet Connection Discovery
  PID:3728
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  - System Network Configuration Discovery: Internet Connection Discovery
  PID:4816
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:2448
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  PID:3624
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  - System Network Configuration Discovery: Internet Connection Discovery
  - Runs ping.exe
  PID:3924
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:4656
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  - System Network Configuration Discovery: Internet Connection Discovery
  - Runs ping.exe
  PID:1280
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  - System Network Configuration Discovery: Internet Connection Discovery
  PID:2240
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:3972
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  PID:4404
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  - System Network Configuration Discovery: Internet Connection Discovery
  PID:4808
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:4948
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  - System Network Configuration Discovery: Internet Connection Discovery
  PID:4828
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  PID:3180
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:872
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  PID:3548
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  - Runs ping.exe
  PID:3960
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:3444
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  PID:3464
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  - Runs ping.exe
  PID:2140
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:4304
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  - Runs ping.exe
  PID:788
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  - Runs ping.exe
  PID:2288
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:2720
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  - Runs ping.exe
  PID:4956
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  - Runs ping.exe
  PID:4700
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:5064
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  PID:2340
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  - Runs ping.exe
  PID:1132
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:1232
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  - Runs ping.exe
  PID:5088
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  - System Network Configuration Discovery: Internet Connection Discovery
  PID:1940
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:2692
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  - System Network Configuration Discovery: Internet Connection Discovery
  PID:1928
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  PID:3824
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:3028
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  - Runs ping.exe
  PID:3408
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  - System Network Configuration Discovery: Internet Connection Discovery
  PID:532
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:684
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  - Runs ping.exe
  PID:1292
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  - System Network Configuration Discovery: Internet Connection Discovery
  - Runs ping.exe
  PID:4712
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:980
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  - System Network Configuration Discovery: Internet Connection Discovery
  - Runs ping.exe
  PID:1428
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  PID:2952
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:3628
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  PID:3848
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  PID:2368
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:5024
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  - System Network Configuration Discovery: Internet Connection Discovery
  PID:2316
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  - System Network Configuration Discovery: Internet Connection Discovery
  PID:4224
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:1988
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  PID:2860
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  PID:720
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:836
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  - System Network Configuration Discovery: Internet Connection Discovery
  PID:3480
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  PID:32
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:368
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  PID:844
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  - Runs ping.exe
  PID:3924
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:4044
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  - System Network Configuration Discovery: Internet Connection Discovery
  PID:3616
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  PID:2240
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:3948
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  - Runs ping.exe
  PID:4324
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  PID:2660
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:4320
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  PID:4184
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  PID:3180
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:2816
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  - Runs ping.exe
  PID:4344
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  - Runs ping.exe
  PID:4420
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:1264
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  PID:2236
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  PID:4608
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:1256
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  - System Network Configuration Discovery: Internet Connection Discovery
  PID:924
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  PID:2288
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:4944
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  - System Network Configuration Discovery: Internet Connection Discovery
  - Runs ping.exe
  PID:208
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  PID:3052
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:1984
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  PID:2340
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  - Runs ping.exe
  PID:4664
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:4604
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  - System Network Configuration Discovery: Internet Connection Discovery
  - Runs ping.exe
  PID:5088
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  - Runs ping.exe
  PID:1516
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:724
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  PID:1928
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  PID:3936
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:4352
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  - Runs ping.exe
  PID:2012
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  - Runs ping.exe
  PID:3576
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:3320
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  - System Network Configuration Discovery: Internet Connection Discovery
  - Runs ping.exe
  PID:700
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  - System Network Configuration Discovery: Internet Connection Discovery
  PID:2920
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:1712
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  - System Network Configuration Discovery: Internet Connection Discovery
  - Runs ping.exe
  PID:1900
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  PID:4024
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:2952
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  - Runs ping.exe
  PID:3820
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  PID:4068
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:3864
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  PID:2992
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  PID:4940
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:1068
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  - System Network Configuration Discovery: Internet Connection Discovery
  PID:3376
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  - Runs ping.exe
  PID:2736
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:720
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  PID:376
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  PID:2448
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:32
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  PID:2852
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  PID:4656
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:3924
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  - System Network Configuration Discovery: Internet Connection Discovery
  PID:2052
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  PID:3972
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:2240
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  PID:4708
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  PID:4948
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:4276
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  - Runs ping.exe
  PID:3324
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  PID:872
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:1016
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  PID:2656
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  - Runs ping.exe
  PID:3444
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:4420
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  PID:3004
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  PID:788
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:3296
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  PID:3524
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  - Runs ping.exe
  PID:4956
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:2288
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  - System Network Configuration Discovery: Internet Connection Discovery
  - Runs ping.exe
  PID:4700
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  PID:3332
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:3052
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  - System Network Configuration Discovery: Internet Connection Discovery
  PID:2124
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  PID:4456
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:1232
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  PID:2728
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  PID:1384
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:2692
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  - System Network Configuration Discovery: Internet Connection Discovery
  - Runs ping.exe
  PID:3980
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  - System Network Configuration Discovery: Internet Connection Discovery
  PID:3664
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:4292
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  - Runs ping.exe
  PID:2020
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  - System Network Configuration Discovery: Internet Connection Discovery
  PID:4924
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:2156
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  - Runs ping.exe
  PID:1496
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  PID:4912
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:1028
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  PID:772
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  - System Network Configuration Discovery: Internet Connection Discovery
  - Runs ping.exe
  PID:4556
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:4024
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  PID:4220
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  - Runs ping.exe
  PID:3600
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:4068
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  PID:4268
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  PID:3172
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:2268
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  PID:3728
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  - System Network Configuration Discovery: Internet Connection Discovery
  PID:4316
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:2736
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  PID:3624
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  PID:3920
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:3944
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  PID:1620
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  - System Network Configuration Discovery: Internet Connection Discovery
  PID:1476
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:4656
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  PID:1700
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  PID:4328
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:2608
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  PID:3232
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  PID:4620
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:4948
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  - System Network Configuration Discovery: Internet Connection Discovery
  PID:1576
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  PID:1708
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:872
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  PID:892
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  - System Network Configuration Discovery: Internet Connection Discovery
  PID:3452
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:3444
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  PID:4968
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  PID:4304
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:4500
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  - Runs ping.exe
  PID:3588
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  PID:448
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:3032
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  - System Network Configuration Discovery: Internet Connection Discovery
  PID:3648
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  PID:4720
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:212
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  - Runs ping.exe
  PID:2340
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  PID:4624
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:452
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  PID:1940
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  - System Network Configuration Discovery: Internet Connection Discovery
  PID:4012
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:3692
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  PID:1516
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  PID:1928
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:3636
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  - Runs ping.exe
  PID:4352
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  PID:1276
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:1512
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  PID:3576
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  PID:3768
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:3976
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  - System Network Configuration Discovery: Internet Connection Discovery
  PID:2444
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  PID:2920
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:4912
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  PID:1900
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  PID:1356
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:4556
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  - Runs ping.exe
  PID:3820
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  - System Network Configuration Discovery: Internet Connection Discovery
  PID:2352
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:2316
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  PID:2404
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  PID:4488
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:2860
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  PID:2260
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  - Runs ping.exe
  PID:836
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:4316
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  - Runs ping.exe
  PID:376
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  - Runs ping.exe
  PID:2448
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:3920
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  PID:3016
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  PID:2264
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:3616
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  - Runs ping.exe
  PID:2052
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  PID:3972
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:4328
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  PID:4708
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  PID:3612
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:4620
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  PID:3324
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  - Runs ping.exe
  PID:4824
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:1708
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  - System Network Configuration Discovery: Internet Connection Discovery
  PID:2656
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  PID:400
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:2116
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  PID:1912
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  PID:4608
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:4304
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  PID:4992
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  - System Network Configuration Discovery: Internet Connection Discovery
  PID:2904
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:432
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  PID:208
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  - System Network Configuration Discovery: Internet Connection Discovery
  PID:3680
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:4720
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  PID:752
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  - Runs ping.exe
  PID:4624
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:4604
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  PID:3516
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  - System Network Configuration Discovery: Internet Connection Discovery
  PID:1384
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:2008
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  PID:5068
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  - Runs ping.exe
  PID:1928
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:3936
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  - System Network Configuration Discovery: Internet Connection Discovery
  PID:2020
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  PID:4924
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:1920
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  - Runs ping.exe
  PID:3856
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  - System Network Configuration Discovery: Internet Connection Discovery
  PID:3768
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:1260
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  PID:3076
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  PID:2920
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:2388
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  - Runs ping.exe
  PID:1060
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  PID:5024
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:4556
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  - Runs ping.exe
  PID:3688
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  PID:1364
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:2316
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  - System Network Configuration Discovery: Internet Connection Discovery
  PID:3172
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  - Runs ping.exe
  PID:3376
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:1144
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  - System Network Configuration Discovery: Internet Connection Discovery
  PID:368
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  - System Network Configuration Discovery: Internet Connection Discovery
  PID:4340
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:844
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  - System Network Configuration Discovery: Internet Connection Discovery
  - Runs ping.exe
  PID:3944
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  PID:2204
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:4792
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  - System Network Configuration Discovery: Internet Connection Discovery
  - Runs ping.exe
  PID:1476
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  PID:3924
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:4364
- C:\Windows\system32\PING.EXE
  ping localhost -n 1
  2⤵
  PID:4808
- C:\Windows\system32\PING.EXE
  PING -n 1 gorillatagvr.com
  2⤵
  PID:4320
- C:\Windows\system32\find.exe
  FIND "TTL="
  2⤵
  PID:3232

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Remote System Discovery

T1018

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Windows 7 deprecation

Loading Replay Monitor...