Analysis Overview
SHA256
1d54f75b31713396cf394bcc659ec80470eff7a3c90bb66b179e80775286e9c5
Threat Level: Known bad
The file Bltized.zip was found to be: Known bad.
Malicious Activity Summary
Stormkitty family
StormKitty payload
StormKitty
Credentials from Password Stores: Credentials from Web Browsers
Disables Task Manager via registry modification
Reads user/profile data of web browsers
Checks computer location settings
Loads dropped DLL
Obfuscated with Agile.Net obfuscator
Adds Run key to start application
Legitimate hosting services abused for malware hosting/C2
Looks up external IP address via web service
Browser Information Discovery
Event Triggered Execution: Netsh Helper DLL
System Network Configuration Discovery: Wi-Fi Discovery
System Location Discovery: System Language Discovery
Program crash
Enumerates physical storage devices
Unsigned PE
Suspicious behavior: GetForegroundWindowSpam
Suspicious use of WriteProcessMemory
Suspicious use of AdjustPrivilegeToken
Suspicious use of FindShellTrayWindow
Modifies system certificate store
Modifies Internet Explorer settings
Suspicious use of SetWindowsHookEx
MITRE ATT&CK
Analysis: static1
Detonation Overview
Reported
2024-08-14 21:32
Signatures
StormKitty payload
| Description | Indicator | Process | Target |
| N/A | N/A | N/A | N/A |
Stormkitty family
Unsigned PE
| Description | Indicator | Process | Target |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
Analysis: behavioral16
Detonation Overview
Submitted
2024-08-14 21:32
Reported
2024-08-14 21:35
Platform
win10v2004-20240802-en
Max time kernel
143s
Max time network
130s
Command Line
Signatures
Program crash
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Windows\SysWOW64\WerFault.exe | C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\UltraEmbeddable.exe |
System Location Discovery: System Language Discovery
| Description | Indicator | Process | Target |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\UltraEmbeddable.exe | N/A |
Processes
C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\UltraEmbeddable.exe
"C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\UltraEmbeddable.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1104 -ip 1104
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1104 -s 872
Network
| Country | Destination | Domain | Proto |
| US | 8.8.8.8:53 | 97.17.167.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 25.140.123.92.in-addr.arpa | udp |
| US | 8.8.8.8:53 | g.bing.com | udp |
| US | 204.79.197.237:443 | g.bing.com | tcp |
| US | 8.8.8.8:53 | 140.32.126.40.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 237.197.79.204.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 55.36.223.20.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 149.220.183.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 26.165.165.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 198.187.3.20.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 147.142.123.92.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 40.58.20.217.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 205.47.74.20.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 240.143.123.92.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 23.236.111.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | tse1.mm.bing.net | udp |
| US | 150.171.27.10:443 | tse1.mm.bing.net | tcp |
| US | 150.171.27.10:443 | tse1.mm.bing.net | tcp |
| US | 150.171.27.10:443 | tse1.mm.bing.net | tcp |
| US | 150.171.27.10:443 | tse1.mm.bing.net | tcp |
| US | 150.171.27.10:443 | tse1.mm.bing.net | tcp |
| US | 8.8.8.8:53 | 57.169.31.20.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 10.27.171.150.in-addr.arpa | udp |
Files
memory/1104-0-0x0000000074D3E000-0x0000000074D3F000-memory.dmp
memory/1104-1-0x0000000000F90000-0x000000000100A000-memory.dmp
Analysis: behavioral1
Detonation Overview
Submitted
2024-08-14 21:32
Reported
2024-08-14 21:35
Platform
win7-20240704-en
Max time kernel
121s
Max time network
121s
Command Line
Signatures
Loads dropped DLL
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Users\Admin\AppData\Local\Temp\BlitzedV12\BlitzedGrabberV12.exe | N/A |
Obfuscated with Agile.Net obfuscator
| Description | Indicator | Process | Target |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
System Location Discovery: System Language Discovery
| Description | Indicator | Process | Target |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | C:\Users\Admin\AppData\Local\Temp\BlitzedV12\BlitzedGrabberV12.exe | N/A |
Suspicious use of SetWindowsHookEx
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Users\Admin\AppData\Local\Temp\BlitzedV12\BlitzedGrabberV12.exe | N/A |
| N/A | N/A | C:\Users\Admin\AppData\Local\Temp\BlitzedV12\BlitzedGrabberV12.exe | N/A |
Processes
C:\Users\Admin\AppData\Local\Temp\BlitzedV12\BlitzedGrabberV12.exe
"C:\Users\Admin\AppData\Local\Temp\BlitzedV12\BlitzedGrabberV12.exe"
Network
Files
memory/2220-0-0x000000007418E000-0x000000007418F000-memory.dmp
memory/2220-1-0x00000000010C0000-0x00000000012B0000-memory.dmp
memory/2220-2-0x0000000074180000-0x000000007486E000-memory.dmp
memory/2220-3-0x0000000005250000-0x0000000005442000-memory.dmp
\Users\Admin\AppData\Local\Temp\dcfb00f9-5ae7-4197-ba59-e48107e40d35\GunaDotNetRT.dll
| MD5 | 9af5eb006bb0bab7f226272d82c896c7 |
| SHA1 | c2a5bb42a5f08f4dc821be374b700652262308f0 |
| SHA256 | 77dc05a6bda90757f66552ee3f469b09f1e00732b4edca0f542872fb591ed9db |
| SHA512 | 7badd41be4c1039302fda9bba19d374ec9446ce24b7db33b66bee4ef38180d1abcd666d2aea468e7e452aa1e1565eedfefed582bf1c2fe477a4171d99d48772a |
memory/2220-12-0x0000000005250000-0x000000000543E000-memory.dmp
memory/2220-15-0x0000000005250000-0x000000000543E000-memory.dmp
memory/2220-13-0x0000000005250000-0x000000000543E000-memory.dmp
memory/2220-17-0x0000000005250000-0x000000000543E000-memory.dmp
memory/2220-21-0x0000000005250000-0x000000000543E000-memory.dmp
memory/2220-23-0x0000000005250000-0x000000000543E000-memory.dmp
memory/2220-25-0x0000000005250000-0x000000000543E000-memory.dmp
memory/2220-27-0x0000000005250000-0x000000000543E000-memory.dmp
memory/2220-31-0x0000000005250000-0x000000000543E000-memory.dmp
memory/2220-35-0x0000000005250000-0x000000000543E000-memory.dmp
memory/2220-37-0x0000000005250000-0x000000000543E000-memory.dmp
memory/2220-39-0x0000000005250000-0x000000000543E000-memory.dmp
memory/2220-33-0x0000000005250000-0x000000000543E000-memory.dmp
memory/2220-29-0x0000000005250000-0x000000000543E000-memory.dmp
memory/2220-19-0x0000000005250000-0x000000000543E000-memory.dmp
memory/2220-11-0x0000000073F80000-0x0000000074000000-memory.dmp
memory/2220-10-0x00000000739A0000-0x00000000739D7000-memory.dmp
memory/2220-41-0x0000000005250000-0x000000000543E000-memory.dmp
memory/2220-49-0x0000000005250000-0x000000000543E000-memory.dmp
memory/2220-60-0x0000000005250000-0x000000000543E000-memory.dmp
memory/2220-65-0x0000000005250000-0x000000000543E000-memory.dmp
memory/2220-73-0x0000000005250000-0x000000000543E000-memory.dmp
memory/2220-51-0x0000000005250000-0x000000000543E000-memory.dmp
memory/2220-71-0x0000000005250000-0x000000000543E000-memory.dmp
memory/2220-69-0x0000000005250000-0x000000000543E000-memory.dmp
memory/2220-67-0x0000000005250000-0x000000000543E000-memory.dmp
memory/2220-63-0x0000000005250000-0x000000000543E000-memory.dmp
memory/2220-61-0x0000000005250000-0x000000000543E000-memory.dmp
memory/2220-57-0x0000000005250000-0x000000000543E000-memory.dmp
memory/2220-55-0x0000000005250000-0x000000000543E000-memory.dmp
memory/2220-53-0x0000000005250000-0x000000000543E000-memory.dmp
memory/2220-47-0x0000000005250000-0x000000000543E000-memory.dmp
memory/2220-45-0x0000000005250000-0x000000000543E000-memory.dmp
memory/2220-43-0x0000000005250000-0x000000000543E000-memory.dmp
memory/2220-11666-0x0000000074180000-0x000000007486E000-memory.dmp
memory/2220-11667-0x0000000074180000-0x000000007486E000-memory.dmp
memory/2220-11668-0x0000000074180000-0x000000007486E000-memory.dmp
C:\Users\Admin\AppData\Local\Temp\BlitzedV12\BlitzedGrabberV12.exe.Config
| MD5 | c6e6fc3cdec0ad213d9330a9b630fd5c |
| SHA1 | ed4278e0e4b9d1b47fbe92ca2f98af62e5d6c027 |
| SHA256 | 96c2db8d8037a20cc6550c935f9a11da70f84a2bc64a1be1807b06bc1bda2492 |
| SHA512 | 37ee70ae328547b684db668ce59c9f7eea672184fb1f5ed41341a0fab84bbe0419f0706742832fc6f1ae78e474cd1d3f5f757fc9c44ed0ca557101a733532e0f |
memory/2220-11676-0x000000007418E000-0x000000007418F000-memory.dmp
memory/2220-11677-0x0000000074180000-0x000000007486E000-memory.dmp
memory/2220-11678-0x00000000739A0000-0x00000000739D7000-memory.dmp
memory/2220-11679-0x0000000074180000-0x000000007486E000-memory.dmp
memory/2220-11680-0x0000000074180000-0x000000007486E000-memory.dmp
Analysis: behavioral10
Detonation Overview
Submitted
2024-08-14 21:32
Reported
2024-08-14 21:35
Platform
win10v2004-20240802-en
Max time kernel
150s
Max time network
106s
Command Line
Signatures
StormKitty
StormKitty payload
| Description | Indicator | Process | Target |
| N/A | N/A | N/A | N/A |
Credentials from Password Stores: Credentials from Web Browsers
Disables Task Manager via registry modification
Checks computer location settings
| Description | Indicator | Process | Target |
| Key value queried | \REGISTRY\USER\S-1-5-21-523280732-2327480845-3730041215-1000\Control Panel\International\Geo\Nation | C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe | N/A |
Reads user/profile data of web browsers
Adds Run key to start application
| Description | Indicator | Process | Target |
| Set value (str) | \REGISTRY\USER\S-1-5-21-523280732-2327480845-3730041215-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\BnFKy = "C:\\Users\\Admin\\AppData\\Local\\Temp\\BlitzedV12\\Resources\\Blitzed.exe" | C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe | N/A |
Legitimate hosting services abused for malware hosting/C2
| Description | Indicator | Process | Target |
| N/A | discord.com | N/A | N/A |
| N/A | discord.com | N/A | N/A |
| N/A | discord.com | N/A | N/A |
| N/A | discord.com | N/A | N/A |
| N/A | discord.com | N/A | N/A |
Looks up external IP address via web service
| Description | Indicator | Process | Target |
| N/A | checkip.dyndns.org | N/A | N/A |
Browser Information Discovery
Enumerates physical storage devices
Event Triggered Execution: Netsh Helper DLL
| Description | Indicator | Process | Target |
| Key value enumerated | \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh | C:\Windows\system32\netsh.exe | N/A |
| Key opened | \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh | C:\Windows\system32\netsh.exe | N/A |
| Key queried | \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh | C:\Windows\system32\netsh.exe | N/A |
| Key value enumerated | \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh | C:\Windows\system32\netsh.exe | N/A |
| Key opened | \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh | C:\Windows\system32\netsh.exe | N/A |
| Key queried | \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh | C:\Windows\system32\netsh.exe | N/A |
System Network Configuration Discovery: Wi-Fi Discovery
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Windows\SYSTEM32\cmd.exe | N/A |
| N/A | N/A | C:\Windows\system32\netsh.exe | N/A |
| N/A | N/A | C:\Windows\SYSTEM32\cmd.exe | N/A |
| N/A | N/A | C:\Windows\system32\netsh.exe | N/A |
Suspicious behavior: GetForegroundWindowSpam
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe | N/A |
Suspicious use of AdjustPrivilegeToken
| Description | Indicator | Process | Target |
| Token: SeDebugPrivilege | N/A | C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe | N/A |
Suspicious use of WriteProcessMemory
Processes
C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe
"C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe"
C:\Windows\SYSTEM32\cmd.exe
"cmd.exe" /C chcp 65001 && netsh wlan show profile | findstr All
C:\Windows\system32\chcp.com
chcp 65001
C:\Windows\system32\netsh.exe
netsh wlan show profile
C:\Windows\system32\findstr.exe
findstr All
C:\Windows\SYSTEM32\cmd.exe
"cmd.exe" /C chcp 65001 && netsh wlan show profile name=65001 key=clear | findstr Key
C:\Windows\system32\chcp.com
chcp 65001
C:\Windows\system32\netsh.exe
netsh wlan show profile name=65001 key=clear
C:\Windows\system32\findstr.exe
findstr Key
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\Conhost.exe
\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\Conhost.exe
\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\Conhost.exe
\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\Conhost.exe
\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\Conhost.exe
\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\Conhost.exe
\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\Conhost.exe
\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\Conhost.exe
\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\Conhost.exe
\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\Conhost.exe
\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\Conhost.exe
\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\mousocoreworker.exe
C:\Windows\System32\mousocoreworker.exe -Embedding
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\Conhost.exe
\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\Conhost.exe
\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\Conhost.exe
\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\Conhost.exe
\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\Conhost.exe
\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\Conhost.exe
\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\Conhost.exe
\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\Conhost.exe
\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\Conhost.exe
\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\Conhost.exe
\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\Conhost.exe
\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\Conhost.exe
\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\Conhost.exe
\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\Conhost.exe
\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\Conhost.exe
\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\Conhost.exe
\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\Conhost.exe
\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\Conhost.exe
\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\Conhost.exe
\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\Conhost.exe
\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\Conhost.exe
\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
Network
| Country | Destination | Domain | Proto |
| US | 8.8.8.8:53 | 217.106.137.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | checkip.dyndns.org | udp |
| DE | 193.122.6.168:80 | checkip.dyndns.org | tcp |
| US | 8.8.8.8:53 | api.anonfiles.com | udp |
| US | 8.8.8.8:53 | discord.com | udp |
| US | 162.159.128.233:443 | discord.com | tcp |
| US | 8.8.8.8:53 | 168.6.122.193.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 100.58.20.217.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 233.128.159.162.in-addr.arpa | udp |
| US | 162.159.128.233:443 | discord.com | tcp |
| US | 8.8.8.8:53 | 64.159.190.20.in-addr.arpa | udp |
| US | 162.159.128.233:443 | discord.com | tcp |
| US | 162.159.128.233:443 | discord.com | tcp |
| US | 8.8.8.8:53 | 228.249.119.40.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 28.118.140.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 103.169.127.40.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 18.31.95.13.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 147.142.123.92.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 25.140.123.92.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 240.143.123.92.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 43.229.111.52.in-addr.arpa | udp |
Files
memory/4652-0-0x00000000000B0000-0x00000000000C6000-memory.dmp
memory/4652-1-0x00007FFB88243000-0x00007FFB88245000-memory.dmp
memory/4652-2-0x0000000000A40000-0x0000000000A4A000-memory.dmp
memory/4652-3-0x0000000000A80000-0x0000000000A9A000-memory.dmp
memory/4652-4-0x00007FFB88240000-0x00007FFB88D01000-memory.dmp
C:\Users\Admin\AppData\Local\Temp\passwords.txt
| MD5 | 68b329da9893e34099c7d8ad5cb9c940 |
| SHA1 | adc83b19e793491b1c6ea0fd8b46cd9f32e592fc |
| SHA256 | 01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b |
| SHA512 | be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09 |
memory/4652-26-0x0000000002430000-0x0000000002442000-memory.dmp
memory/4652-27-0x000000001C250000-0x000000001C28C000-memory.dmp
memory/4652-28-0x000000001BEA0000-0x000000001C00A000-memory.dmp
memory/4652-30-0x00007FFB88243000-0x00007FFB88245000-memory.dmp
memory/4652-32-0x00007FFB88240000-0x00007FFB88D01000-memory.dmp
Analysis: behavioral11
Detonation Overview
Submitted
2024-08-14 21:32
Reported
2024-08-14 21:35
Platform
win7-20240705-en
Max time kernel
16s
Max time network
17s
Command Line
Signatures
Processes
C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\BouncyCastle.Crypto.dll,#1
Network
Files
Analysis: behavioral12
Detonation Overview
Submitted
2024-08-14 21:32
Reported
2024-08-14 21:35
Platform
win10v2004-20240802-en
Max time kernel
139s
Max time network
143s
Command Line
Signatures
Processes
C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\BouncyCastle.Crypto.dll,#1
Network
| Country | Destination | Domain | Proto |
| US | 8.8.8.8:53 | 25.140.123.92.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 140.32.126.40.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 28.118.140.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 97.17.167.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 217.106.137.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 26.165.165.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 18.31.95.13.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 172.210.232.199.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 240.143.123.92.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 43.229.111.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 26.35.223.20.in-addr.arpa | udp |
| US | 8.8.8.8:53 | tse1.mm.bing.net | udp |
| US | 150.171.28.10:443 | tse1.mm.bing.net | tcp |
| US | 150.171.28.10:443 | tse1.mm.bing.net | tcp |
| US | 150.171.28.10:443 | tse1.mm.bing.net | tcp |
| US | 150.171.28.10:443 | tse1.mm.bing.net | tcp |
| US | 150.171.28.10:443 | tse1.mm.bing.net | tcp |
| US | 8.8.8.8:53 | 10.28.171.150.in-addr.arpa | udp |
Files
Analysis: behavioral15
Detonation Overview
Submitted
2024-08-14 21:32
Reported
2024-08-14 21:35
Platform
win7-20240704-en
Max time kernel
26s
Max time network
21s
Command Line
Signatures
Program crash
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Windows\SysWOW64\WerFault.exe | C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\UltraEmbeddable.exe |
System Location Discovery: System Language Discovery
| Description | Indicator | Process | Target |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\UltraEmbeddable.exe | N/A |
Suspicious use of WriteProcessMemory
| Description | Indicator | Process | Target |
| PID 2304 wrote to memory of 2504 | N/A | C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\UltraEmbeddable.exe | C:\Windows\SysWOW64\WerFault.exe |
| PID 2304 wrote to memory of 2504 | N/A | C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\UltraEmbeddable.exe | C:\Windows\SysWOW64\WerFault.exe |
| PID 2304 wrote to memory of 2504 | N/A | C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\UltraEmbeddable.exe | C:\Windows\SysWOW64\WerFault.exe |
| PID 2304 wrote to memory of 2504 | N/A | C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\UltraEmbeddable.exe | C:\Windows\SysWOW64\WerFault.exe |
Processes
C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\UltraEmbeddable.exe
"C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\UltraEmbeddable.exe"
C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2304 -s 552
Network
Files
memory/2304-0-0x000000007477E000-0x000000007477F000-memory.dmp
memory/2304-1-0x0000000001090000-0x000000000110A000-memory.dmp
memory/2304-2-0x000000007477E000-0x000000007477F000-memory.dmp
Analysis: behavioral8
Detonation Overview
Submitted
2024-08-14 21:32
Reported
2024-08-14 21:36
Platform
win10v2004-20240802-en
Max time kernel
150s
Max time network
163s
Command Line
Signatures
Processes
C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Anarchy.dll,#1
Network
| Country | Destination | Domain | Proto |
| US | 8.8.8.8:53 | 217.106.137.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 37.58.20.217.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 57.169.31.20.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 95.221.229.192.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 0.159.190.20.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 28.118.140.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 26.165.165.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 18.31.95.13.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 147.142.123.92.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 38.58.20.217.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 43.58.199.20.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 30.243.111.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | tse1.mm.bing.net | udp |
| US | 150.171.28.10:443 | tse1.mm.bing.net | tcp |
| US | 150.171.28.10:443 | tse1.mm.bing.net | tcp |
| US | 150.171.28.10:443 | tse1.mm.bing.net | tcp |
| US | 150.171.28.10:443 | tse1.mm.bing.net | tcp |
| US | 150.171.28.10:443 | tse1.mm.bing.net | tcp |
| US | 8.8.8.8:53 | 131.72.42.20.in-addr.arpa | udp |
Files
Analysis: behavioral13
Detonation Overview
Submitted
2024-08-14 21:32
Reported
2024-08-14 21:35
Platform
win7-20240708-en
Max time kernel
122s
Max time network
125s
Command Line
Signatures
Processes
C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Newtonsoft.Json.dll,#1
Network
Files
Analysis: behavioral2
Detonation Overview
Submitted
2024-08-14 21:32
Reported
2024-08-14 21:35
Platform
win10v2004-20240802-en
Max time kernel
148s
Max time network
152s
Command Line
Signatures
Loads dropped DLL
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Users\Admin\AppData\Local\Temp\BlitzedV12\BlitzedGrabberV12.exe | N/A |
Obfuscated with Agile.Net obfuscator
| Description | Indicator | Process | Target |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
System Location Discovery: System Language Discovery
| Description | Indicator | Process | Target |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | C:\Users\Admin\AppData\Local\Temp\BlitzedV12\BlitzedGrabberV12.exe | N/A |
Suspicious use of SetWindowsHookEx
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Users\Admin\AppData\Local\Temp\BlitzedV12\BlitzedGrabberV12.exe | N/A |
| N/A | N/A | C:\Users\Admin\AppData\Local\Temp\BlitzedV12\BlitzedGrabberV12.exe | N/A |
Processes
C:\Users\Admin\AppData\Local\Temp\BlitzedV12\BlitzedGrabberV12.exe
"C:\Users\Admin\AppData\Local\Temp\BlitzedV12\BlitzedGrabberV12.exe"
Network
| Country | Destination | Domain | Proto |
| US | 8.8.8.8:53 | 149.220.183.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 25.140.123.92.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 22.160.190.20.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 95.221.229.192.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 13.86.106.20.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 86.23.85.13.in-addr.arpa | udp |
| US | 8.8.8.8:53 | g.bing.com | udp |
| US | 204.79.197.237:443 | g.bing.com | tcp |
| US | 8.8.8.8:53 | 237.197.79.204.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 57.169.31.20.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 56.126.166.20.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 192.142.123.92.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 28.118.140.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 217.106.137.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 31.243.111.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 205.47.74.20.in-addr.arpa | udp |
| US | 8.8.8.8:53 | tse1.mm.bing.net | udp |
| US | 150.171.28.10:443 | tse1.mm.bing.net | tcp |
| US | 150.171.28.10:443 | tse1.mm.bing.net | tcp |
| US | 150.171.28.10:443 | tse1.mm.bing.net | tcp |
| US | 150.171.28.10:443 | tse1.mm.bing.net | tcp |
| US | 150.171.28.10:443 | tse1.mm.bing.net | tcp |
| US | 8.8.8.8:53 | 26.35.223.20.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 10.28.171.150.in-addr.arpa | udp |
Files
memory/2252-0-0x0000000074E7E000-0x0000000074E7F000-memory.dmp
memory/2252-1-0x0000000000E00000-0x0000000000FF0000-memory.dmp
memory/2252-2-0x0000000006140000-0x00000000066E4000-memory.dmp
memory/2252-3-0x00000000059C0000-0x0000000005A52000-memory.dmp
memory/2252-4-0x00000000059A0000-0x00000000059AA000-memory.dmp
memory/2252-5-0x0000000074E70000-0x0000000075620000-memory.dmp
memory/2252-6-0x0000000005D80000-0x0000000005F72000-memory.dmp
C:\Users\Admin\AppData\Local\Temp\dcfb00f9-5ae7-4197-ba59-e48107e40d35\GunaDotNetRT.dll
| MD5 | 9af5eb006bb0bab7f226272d82c896c7 |
| SHA1 | c2a5bb42a5f08f4dc821be374b700652262308f0 |
| SHA256 | 77dc05a6bda90757f66552ee3f469b09f1e00732b4edca0f542872fb591ed9db |
| SHA512 | 7badd41be4c1039302fda9bba19d374ec9446ce24b7db33b66bee4ef38180d1abcd666d2aea468e7e452aa1e1565eedfefed582bf1c2fe477a4171d99d48772a |
memory/2252-22-0x0000000005D80000-0x0000000005F6E000-memory.dmp
memory/2252-31-0x0000000071570000-0x00000000715A7000-memory.dmp
memory/2252-43-0x0000000005D80000-0x0000000005F6E000-memory.dmp
memory/2252-75-0x0000000005D80000-0x0000000005F6E000-memory.dmp
memory/2252-77-0x0000000005D80000-0x0000000005F6E000-memory.dmp
memory/2252-71-0x0000000005D80000-0x0000000005F6E000-memory.dmp
memory/2252-69-0x0000000005D80000-0x0000000005F6E000-memory.dmp
memory/2252-67-0x0000000005D80000-0x0000000005F6E000-memory.dmp
memory/2252-63-0x0000000005D80000-0x0000000005F6E000-memory.dmp
memory/2252-61-0x0000000005D80000-0x0000000005F6E000-memory.dmp
memory/2252-59-0x0000000005D80000-0x0000000005F6E000-memory.dmp
memory/2252-57-0x0000000005D80000-0x0000000005F6E000-memory.dmp
memory/2252-55-0x0000000005D80000-0x0000000005F6E000-memory.dmp
memory/2252-73-0x0000000005D80000-0x0000000005F6E000-memory.dmp
memory/2252-65-0x0000000005D80000-0x0000000005F6E000-memory.dmp
memory/2252-53-0x0000000005D80000-0x0000000005F6E000-memory.dmp
memory/2252-51-0x0000000005D80000-0x0000000005F6E000-memory.dmp
memory/2252-47-0x0000000005D80000-0x0000000005F6E000-memory.dmp
memory/2252-45-0x0000000005D80000-0x0000000005F6E000-memory.dmp
memory/2252-39-0x0000000005D80000-0x0000000005F6E000-memory.dmp
memory/2252-37-0x0000000005D80000-0x0000000005F6E000-memory.dmp
memory/2252-35-0x0000000005D80000-0x0000000005F6E000-memory.dmp
memory/2252-33-0x0000000005D80000-0x0000000005F6E000-memory.dmp
memory/2252-49-0x0000000005D80000-0x0000000005F6E000-memory.dmp
memory/2252-41-0x0000000005D80000-0x0000000005F6E000-memory.dmp
memory/2252-30-0x0000000005D80000-0x0000000005F6E000-memory.dmp
memory/2252-28-0x0000000005D80000-0x0000000005F6E000-memory.dmp
memory/2252-26-0x0000000005D80000-0x0000000005F6E000-memory.dmp
memory/2252-24-0x0000000005D80000-0x0000000005F6E000-memory.dmp
memory/2252-18-0x0000000005D80000-0x0000000005F6E000-memory.dmp
memory/2252-16-0x0000000005D80000-0x0000000005F6E000-memory.dmp
memory/2252-15-0x0000000005D80000-0x0000000005F6E000-memory.dmp
memory/2252-14-0x0000000073880000-0x0000000073909000-memory.dmp
memory/2252-20-0x0000000005D80000-0x0000000005F6E000-memory.dmp
memory/2252-11670-0x0000000006B90000-0x0000000006C2C000-memory.dmp
memory/2252-11671-0x0000000074E70000-0x0000000075620000-memory.dmp
memory/2252-11672-0x0000000074E70000-0x0000000075620000-memory.dmp
memory/2252-11673-0x0000000074E70000-0x0000000075620000-memory.dmp
C:\Users\Admin\AppData\Local\Temp\BlitzedV12\BlitzedGrabberV12.exe.Config
| MD5 | c6e6fc3cdec0ad213d9330a9b630fd5c |
| SHA1 | ed4278e0e4b9d1b47fbe92ca2f98af62e5d6c027 |
| SHA256 | 96c2db8d8037a20cc6550c935f9a11da70f84a2bc64a1be1807b06bc1bda2492 |
| SHA512 | 37ee70ae328547b684db668ce59c9f7eea672184fb1f5ed41341a0fab84bbe0419f0706742832fc6f1ae78e474cd1d3f5f757fc9c44ed0ca557101a733532e0f |
memory/2252-11681-0x0000000074E70000-0x0000000075620000-memory.dmp
memory/2252-11682-0x0000000074E7E000-0x0000000074E7F000-memory.dmp
memory/2252-11683-0x0000000074E70000-0x0000000075620000-memory.dmp
memory/2252-11684-0x0000000071570000-0x00000000715A7000-memory.dmp
memory/2252-11685-0x0000000074E70000-0x0000000075620000-memory.dmp
Analysis: behavioral3
Detonation Overview
Submitted
2024-08-14 21:32
Reported
2024-08-14 21:35
Platform
win7-20240704-en
Max time kernel
70s
Max time network
138s
Command Line
Signatures
System Location Discovery: System Language Discovery
| Description | Indicator | Process | Target |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLED.EXE | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | C:\Program Files (x86)\Internet Explorer\iexplore.exe | N/A |
| Key opened | \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language | C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE | N/A |
Modifies Internet Explorer settings
| Description | Indicator | Process | Target |
| Set value (data) | \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 | C:\Program Files\Internet Explorer\IEXPLORE.EXE | N/A |
| Set value (int) | \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" | C:\Program Files\Internet Explorer\IEXPLORE.EXE | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\GPU | C:\Program Files\Internet Explorer\IEXPLORE.EXE | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\IETld\LowMic | C:\Program Files\Internet Explorer\IEXPLORE.EXE | N/A |
| Set value (str) | \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" | C:\Program Files\Internet Explorer\IEXPLORE.EXE | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing | C:\Program Files\Internet Explorer\IEXPLORE.EXE | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic | C:\Program Files\Internet Explorer\IEXPLORE.EXE | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser | C:\Program Files\Internet Explorer\IEXPLORE.EXE | N/A |
| Set value (int) | \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{D1057F21-5A84-11EF-B137-6E739D7B0BBB} = "0" | C:\Program Files\Internet Explorer\IEXPLORE.EXE | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch | C:\Program Files\Internet Explorer\IEXPLORE.EXE | N/A |
| Set value (str) | \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" | C:\Program Files\Internet Explorer\IEXPLORE.EXE | N/A |
| Set value (int) | \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" | C:\Program Files\Internet Explorer\IEXPLORE.EXE | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Main | C:\Program Files\Internet Explorer\IEXPLORE.EXE | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage | C:\Program Files\Internet Explorer\IEXPLORE.EXE | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain | C:\Program Files\Internet Explorer\IEXPLORE.EXE | N/A |
| Set value (int) | \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" | C:\Program Files\Internet Explorer\IEXPLORE.EXE | N/A |
| Set value (data) | \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 | C:\Program Files\Internet Explorer\IEXPLORE.EXE | N/A |
| Set value (int) | \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "429833065" | C:\Program Files\Internet Explorer\IEXPLORE.EXE | N/A |
| Set value (data) | \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000bb7c5835718279428690b074aa627b7000000000020000000000106600000001000020000000174a34afb4f4e0f1e08e6f0991f865566e0ab697c2f8a9a988267c149064c7d2000000000e8000000002000020000000c5a66ce5e93b42d4403e34dd327bdfe465c85ac89bd5ceacaffdb72b41dd99c320000000e1100f7d3b2015628bfd182192bfde4e8688d4ccfa2c4c01c442ce0391e43c3f40000000e93e13de94cd2291f70bf4cf2e1c5bfa3ea3f29bbec084d82376efa496eb1419118bbe6d9bfc8908feb21f5de058f2b13e1b9b77deadff61ee72a28e55537656 | C:\Program Files\Internet Explorer\IEXPLORE.EXE | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\IntelliForms | C:\Program Files\Internet Explorer\IEXPLORE.EXE | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\InternetRegistry | C:\Program Files\Internet Explorer\IEXPLORE.EXE | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\PageSetup | C:\Program Files\Internet Explorer\IEXPLORE.EXE | N/A |
| Set value (int) | \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" | C:\Program Files\Internet Explorer\IEXPLORE.EXE | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch | C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE | N/A |
| Set value (int) | \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" | C:\Program Files\Internet Explorer\IEXPLORE.EXE | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\LowRegistry | C:\Program Files\Internet Explorer\IEXPLORE.EXE | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive | C:\Program Files\Internet Explorer\IEXPLORE.EXE | N/A |
| Set value (str) | \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" | C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\SearchScopes | C:\Program Files\Internet Explorer\IEXPLORE.EXE | N/A |
| Set value (data) | \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 40d0eca591eeda01 | C:\Program Files\Internet Explorer\IEXPLORE.EXE | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\DomainSuggestion | C:\Program Files\Internet Explorer\IEXPLORE.EXE | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Toolbar | C:\Program Files\Internet Explorer\IEXPLORE.EXE | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Zoom | C:\Program Files\Internet Explorer\IEXPLORE.EXE | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Main | C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery | C:\Program Files\Internet Explorer\IEXPLORE.EXE | N/A |
| Key created | \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage | C:\Program Files\Internet Explorer\IEXPLORE.EXE | N/A |
Suspicious use of FindShellTrayWindow
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Program Files\Internet Explorer\IEXPLORE.EXE | N/A |
Suspicious use of SetWindowsHookEx
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Program Files\Internet Explorer\IEXPLORE.EXE | N/A |
| N/A | N/A | C:\Program Files\Internet Explorer\IEXPLORE.EXE | N/A |
| N/A | N/A | C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE | N/A |
| N/A | N/A | C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE | N/A |
| N/A | N/A | C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE | N/A |
| N/A | N/A | C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE | N/A |
Suspicious use of WriteProcessMemory
Processes
C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLED.EXE
"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\BlitzedV12\BlitzedGrabberV12.exe.xml"
C:\Program Files (x86)\Internet Explorer\iexplore.exe
"C:\Program Files (x86)\Internet Explorer\iexplore.exe" -nohome
C:\Program Files\Internet Explorer\IEXPLORE.EXE
"C:\Program Files\Internet Explorer\IEXPLORE.EXE" -nohome
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2452 CREDAT:275457 /prefetch:2
Network
| Country | Destination | Domain | Proto |
| US | 204.79.197.200:443 | ieonline.microsoft.com | tcp |
| US | 204.79.197.200:443 | ieonline.microsoft.com | tcp |
| US | 204.79.197.200:443 | ieonline.microsoft.com | tcp |
Files
C:\Users\Admin\AppData\Local\Temp\Cab6DD3.tmp
| MD5 | 49aebf8cbd62d92ac215b2923fb1b9f5 |
| SHA1 | 1723be06719828dda65ad804298d0431f6aff976 |
| SHA256 | b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f |
| SHA512 | bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b |
C:\Users\Admin\AppData\Local\Temp\Tar6E91.tmp
| MD5 | 4ea6026cf93ec6338144661bf1202cd1 |
| SHA1 | a1dec9044f750ad887935a01430bf49322fbdcb7 |
| SHA256 | 8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8 |
| SHA512 | 6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | ce827ae8a42f4c2d77a840bc9b774a76 |
| SHA1 | 8a233949876527fd83114def2f3c1b4108f0b5a4 |
| SHA256 | 46d1c4caec404fa8f918b99d0f6f5a2a05397970baf190444af9d25d702cb855 |
| SHA512 | 4a51e91cd7016587da715fd22f110db7427a882d10ab5284a1a78e19aedbc6e9d6e74faea97f452f00080653f6a3846b632cdc6f76babb7bac7867c58e5c068a |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | eeb816ce87607680828789884513e429 |
| SHA1 | 89ac1d62a1936df29e843c63432587b140b6b895 |
| SHA256 | 2c74a8d2bfe81476e24176c57e3bb2dc77bb258409c70ed02dd87c940e63e174 |
| SHA512 | 7294e67542a8c24ad2fa34d8fd5fec1468888f3cf7baff83d5bb742f03a6f72fc6118f88cd8ff9d88c559ed59bcf16334e6dd259c046ba18312acb0e31f49e08 |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | f793778892e44d77cfb37fb997a54bc2 |
| SHA1 | 75508adcd83cf9f7351a278e2c325472199bf8e7 |
| SHA256 | 0d56732fa81f07c3d7a110326ad1fb5f2e4df74d27892ba443b69601f7f9bee1 |
| SHA512 | 8ba4ebd1cc186f66ff59861e413c90dc6ba3382f1d5ef3ee4eb3dfff32c904b730c76df16febb936fc25fed30006984b3f00565b496f467fe665e520bbce2e8a |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | eb59d9d7bd008e6858abf45fba6151a5 |
| SHA1 | 99249bb97bfed304c63d7acdc87b7216a48f982b |
| SHA256 | 3d008a0fa1ab0c8865f242458e61a61f865d40f726c50ffa757ad44529a52251 |
| SHA512 | b282d79ea14385414dc33ce76fedb54286d964082fdd7359b0ded368db5c06817d06b64ad63514e52573b42ca615bb887538caf14b628acb99552689e86e34dc |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | c9ec3e6683f1a97179c9c50a001fa583 |
| SHA1 | af80878e8f6f351ae8f3f7246ec8e63e51ac8d39 |
| SHA256 | 45cccfc6d339c00c9acc1d75d444f5d73835e72ca1c4f6aba8d7e34594f24213 |
| SHA512 | 731b35123ebfb852c5d41033c9b178e52be845214343cb0e7341b54aab3607fed71e08e1a9a92a827900384d68e61db836653b0a16f0a6c11e42ebd5f033c336 |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | d7900e8bed6ef2d0d8137534e01a528e |
| SHA1 | 0540f62003c0dd0df4addb443279805413ea6b36 |
| SHA256 | 5dc50cbc8eb54314b4412079c6975e5fc1a555fa60de0ffcfee462d497859dc8 |
| SHA512 | 92cdc51f41e82d49ff4b1e161c7296cc48706680cba6a458de362cf2f3e56e08caaf1c1cecd888d15eb298ea48964f2ee9939e17a910c021ab510b0af24483aa |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | 37eb359ebf0f08af453c05137cc0e898 |
| SHA1 | 0dde2b6e7241f32520b7f97277b1e6981d1deca1 |
| SHA256 | 00409e482f8a40c954ce06b49b1d28ad470cdef75bd2691513317514514b621d |
| SHA512 | fc3ed14b65e5feae93d7ddce5a7bdabcfe1210d8ac4db7fb16bcd228e19272ef0fb0954a64e5faa659917d5396004643d0485ed69573e47544860f6902a3c05d |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | 1e1ac64d8425e5e0a99f8d3461b1af39 |
| SHA1 | 01751c3e96d201f83e2f3d81e46b1e782e121201 |
| SHA256 | dbd5710f5ed4d4c4f156ae0908b085376757a95a5533c1fa50818fccacf2f2a1 |
| SHA512 | 2e5a64e0c2ed875f90ad12160c5ba452ca315af26faa34eeb569b3d05a36fc24186200b48a0cb067c67f35ade9fdd9d3d2f3eadfc3602968152f3cb5d204c796 |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | 68843d2eff9a6ae752700d5e941f7101 |
| SHA1 | 35482f809cccabcef9d1f577425065d0996327b4 |
| SHA256 | 9e73bc5bd6ecc48b0d02df8df7b16fee5d258935b1a6804a4cf80477cb351551 |
| SHA512 | fda5446e6673f39710dc16b49b902d0678017249ed6f3310a1b27624878607c05ecfb49f69b714f70c06f5c2622b5c6c98ecd9a8ad281e421f7c3932faa26533 |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | 106059225b46365717ae66bc06bfc83d |
| SHA1 | e29515f9371b17d15b83045cad65b7d2192ea9c2 |
| SHA256 | 4a59ab2d74e7491e301056baee7d9f43aa1b561b20bd32bcd72f30ecf1806704 |
| SHA512 | 4fcf628f9213cfc09ea6df46732be0868c5f02b6fd546bd837917a0972144f37e06dc9cee672218b836c3d71badf0a79acf755ca96a34310bd660035d5c23a60 |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | 873704b8b058be1916238bcc41f56f99 |
| SHA1 | 2a2333dc4c0f075a0f35eed689df00e85c6b03a6 |
| SHA256 | a13b4efd05b71b10431c947954a41168540815085d8eba8744b35b7f826a1065 |
| SHA512 | 8394ad7b40cd8874ac16c18a6dfd3f203700777ea79897a43ff2e84bf42e3d5cd6088a4dcf52d3b5aeb6b0de6f74195fa56c98618cf24a2edc6f01df1b2a6320 |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | b3bb44db342a6608bc93926d13d751b7 |
| SHA1 | ec7d805c42eef55297edf50f73139261fff65ca2 |
| SHA256 | 3234d0678cdfaaf9044d21d6f127a23f13d872a075b79842007f40244f73f19c |
| SHA512 | c8e243ec5f587287eabd5487c90c58cd26de7953ddc6324cbc3c1560dc21273c5a6cf95a6e46b435163a3420bf13f210c945d7f4f094a097f0c9bc2c1098bf57 |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | 618cfc8594c00097a861334b714a3aa9 |
| SHA1 | 52e1b76c41af9e3cd35414c61993a12b29d3c791 |
| SHA256 | 998f56d21db16af84b34d3fd4dc40d32336fa6f4146da6385115a778cfc6d0a7 |
| SHA512 | ba8343af06e4115361433f33e949a545ddc662e68367296185e61bbc375888d25fc12fe495395625a2bda23fa0d108742f7c7a14d6d5c88ad3946f67e7abbbc1 |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | 22987e4d19ed208781df349bf5a0fe5e |
| SHA1 | 3962dd9212db475213781ec0771af6ccc41aadd5 |
| SHA256 | 596410e356459159ef70e0d43c287f3631efb8867f8a5d5a5ba92652841d1837 |
| SHA512 | 0dfc6dcffd151513710c3ddeb86c266c5a0bd2ac8338f451bcfd629164459750799d4bca316b255d7b8d908c3d02290995f482e54eac56a01ef9238ba0652015 |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | e2680b4f06b3b80a4a022e0fd10edada |
| SHA1 | 73181048ed8ca8b2296b1fd41e04524c3777b19d |
| SHA256 | 8a5c3090dbb20b78733f6f23c472de3d2439d3c9320f96017cbb60559db7bfc3 |
| SHA512 | d28c92334b76b4e62481433e506574fac6b22629aeeafcf61f671cdf8072814b6fea819d98cdf470d2ea1b2e5c476b87412b6ce32e4acfb7d0e7e778afc786bb |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | d4bf2ebcdfeb67e0eec52b45edaebb9e |
| SHA1 | f5db9bc03e9ad12d43c8d814d9a065ac256c267c |
| SHA256 | 2465aaed30c4f838b7739e56c0f7392e09bbcaba0e7cb8a2fe04b18a0db6a432 |
| SHA512 | 2eed7def2bdd8925d7c9941d24f7a7fc019c2d819101cf31eadb59fc47e88a9aa1f1f94214a37a258e2ded84481f49bc6f1094d80370be1956ace1a4469fc02a |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | ae1d8e88cfe4e0d239c99643a921e85a |
| SHA1 | 23ce222699e7efcf7037d73c4ddfbd84ea0399a5 |
| SHA256 | 9cb6ccae51fbfc0c77f4e9f6a623af2550869c3e4956def60e25dcefb1e85513 |
| SHA512 | 069deb38d62a928568ed47befa031dddce02135f7523650c2c4f336a70049b77fa45362ebb5de9f74d5bba6ded92242d965f0ab6a9c55466e8b9bf93affaeb8b |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | 6ba0847bd4945f975c0f4d81477bc9b7 |
| SHA1 | b101524e166ec8be2959eca0e9f9cc2cbaf9d9b2 |
| SHA256 | 8cb225fea87aa9b084f6fe6be81ea882b5690ff14f9c3e9225a418c0d1f10f4f |
| SHA512 | 7e8db652966d9443bee3e01e9b0da020c282226ecaf2456842fc8d3d776dbaa2d713dc40ef6ab9b9a5614e31ffb75db0298964ae9975df8f9e2968ce2de709f7 |
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
| MD5 | e6faa356836034bd8738fdca464ecafa |
| SHA1 | c191276dee903c802ae8d6103f95681c31380f21 |
| SHA256 | 545d83ee62cc967b0d94d9974919390e6824901c480b2df08ed86860f8e3ae61 |
| SHA512 | ecbc888b1a44f6cdb01c1abd26d927285f0d0223e6db582e6aa10a696af7e0e75ad271eee9ae8dcf7a11eae1fdc8a88e1c8f76a1ef2f9c94c1e2059823c7205d |
Analysis: behavioral4
Detonation Overview
Submitted
2024-08-14 21:32
Reported
2024-08-14 21:35
Platform
win10v2004-20240802-en
Max time kernel
136s
Max time network
157s
Command Line
Signatures
Processes
C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE
"C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\BlitzedV12\BlitzedGrabberV12.exe.xml"
Network
| Country | Destination | Domain | Proto |
| US | 8.8.8.8:53 | 97.17.167.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 138.32.126.40.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 13.86.106.20.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 26.35.223.20.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 103.169.127.40.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 206.23.85.13.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 21.58.20.217.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 23.236.111.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | tse1.mm.bing.net | udp |
| US | 150.171.27.10:443 | tse1.mm.bing.net | tcp |
| US | 150.171.27.10:443 | tse1.mm.bing.net | tcp |
| US | 150.171.27.10:443 | tse1.mm.bing.net | tcp |
| US | 150.171.27.10:443 | tse1.mm.bing.net | tcp |
| US | 150.171.27.10:443 | tse1.mm.bing.net | tcp |
Files
memory/3880-0-0x00007FFE35090000-0x00007FFE350A0000-memory.dmp
memory/3880-1-0x00007FFE750AD000-0x00007FFE750AE000-memory.dmp
memory/3880-2-0x00007FFE75010000-0x00007FFE75205000-memory.dmp
memory/3880-3-0x00007FFE75010000-0x00007FFE75205000-memory.dmp
Analysis: behavioral5
Detonation Overview
Submitted
2024-08-14 21:32
Reported
2024-08-14 21:35
Platform
win7-20240704-en
Max time kernel
119s
Max time network
121s
Command Line
Signatures
Processes
C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\APIFOR.dll,#1
Network
Files
Analysis: behavioral6
Detonation Overview
Submitted
2024-08-14 21:32
Reported
2024-08-14 21:35
Platform
win10v2004-20240802-en
Max time kernel
139s
Max time network
153s
Command Line
Signatures
Processes
C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\APIFOR.dll,#1
Network
| Country | Destination | Domain | Proto |
| US | 8.8.8.8:53 | g.bing.com | udp |
| US | 13.107.21.237:443 | g.bing.com | tcp |
| US | 8.8.8.8:53 | 28.118.140.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 240.143.123.92.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 95.221.229.192.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 71.159.190.20.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 237.21.107.13.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 26.35.223.20.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 149.220.183.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 103.169.127.40.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 206.23.85.13.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 147.142.123.92.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 205.47.74.20.in-addr.arpa | udp |
| US | 8.8.8.8:53 | tse1.mm.bing.net | udp |
| US | 150.171.28.10:443 | tse1.mm.bing.net | tcp |
| US | 150.171.28.10:443 | tse1.mm.bing.net | tcp |
| US | 150.171.28.10:443 | tse1.mm.bing.net | tcp |
| US | 150.171.28.10:443 | tse1.mm.bing.net | tcp |
| US | 150.171.28.10:443 | tse1.mm.bing.net | tcp |
Files
Analysis: behavioral7
Detonation Overview
Submitted
2024-08-14 21:32
Reported
2024-08-14 21:35
Platform
win7-20240708-en
Max time kernel
118s
Max time network
120s
Command Line
Signatures
Processes
C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Anarchy.dll,#1
Network
Files
Analysis: behavioral9
Detonation Overview
Submitted
2024-08-14 21:32
Reported
2024-08-14 21:35
Platform
win7-20240729-en
Max time kernel
68s
Max time network
125s
Command Line
Signatures
StormKitty
StormKitty payload
| Description | Indicator | Process | Target |
| N/A | N/A | N/A | N/A |
Credentials from Password Stores: Credentials from Web Browsers
Disables Task Manager via registry modification
Reads user/profile data of web browsers
Adds Run key to start application
| Description | Indicator | Process | Target |
| Set value (str) | \REGISTRY\USER\S-1-5-21-2257386474-3982792636-3902186748-1000\Software\Microsoft\Windows\CurrentVersion\Run\EFyJd = "C:\\Users\\Admin\\AppData\\Local\\Temp\\BlitzedV12\\Resources\\Blitzed.exe" | C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe | N/A |
Legitimate hosting services abused for malware hosting/C2
| Description | Indicator | Process | Target |
| N/A | discord.com | N/A | N/A |
| N/A | discord.com | N/A | N/A |
| N/A | discord.com | N/A | N/A |
| N/A | discord.com | N/A | N/A |
| N/A | discord.com | N/A | N/A |
Looks up external IP address via web service
| Description | Indicator | Process | Target |
| N/A | checkip.dyndns.org | N/A | N/A |
Browser Information Discovery
Enumerates physical storage devices
Event Triggered Execution: Netsh Helper DLL
| Description | Indicator | Process | Target |
| Key opened | \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh | C:\Windows\system32\netsh.exe | N/A |
| Key queried | \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh | C:\Windows\system32\netsh.exe | N/A |
| Key value enumerated | \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh | C:\Windows\system32\netsh.exe | N/A |
| Key opened | \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh | C:\Windows\system32\netsh.exe | N/A |
| Key queried | \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh | C:\Windows\system32\netsh.exe | N/A |
| Key value enumerated | \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh | C:\Windows\system32\netsh.exe | N/A |
System Network Configuration Discovery: Wi-Fi Discovery
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Windows\system32\cmd.exe | N/A |
| N/A | N/A | C:\Windows\system32\netsh.exe | N/A |
| N/A | N/A | C:\Windows\system32\cmd.exe | N/A |
| N/A | N/A | C:\Windows\system32\netsh.exe | N/A |
Modifies system certificate store
| Description | Indicator | Process | Target |
| Set value (data) | \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D4DE20D05E66FC53FE1A50882C78DB2852CAE474\Blob = 040000000100000010000000acb694a59c17e0d791529bb19706a6e4030000000100000014000000d4de20d05e66fc53fe1a50882c78db2852cae47409000000010000000c000000300a06082b060105050703011d0000000100000010000000918ad43a9475f78bb5243de886d8103c140000000100000014000000e59d5930824758ccacfa085436867b3ab5044df053000000010000002400000030223020060a2b06010401b13e01640130123010060a2b0601040182373c0101030200c00b0000000100000034000000420061006c00740069006d006f007200650020004300790062006500720054007200750073007400200052006f006f00740000000f0000000100000014000000ce0e658aa3e847e467a147b3049191093d055e6f20000000010000007b030000308203773082025fa0030201020204020000b9300d06092a864886f70d0101050500305a310b300906035504061302494531123010060355040a130942616c74696d6f726531133011060355040b130a43796265725472757374312230200603550403131942616c74696d6f7265204379626572547275737420526f6f74301e170d3030303531323138343630305a170d3235303531323233353930305a305a310b300906035504061302494531123010060355040a130942616c74696d6f726531133011060355040b130a43796265725472757374312230200603550403131942616c74696d6f7265204379626572547275737420526f6f7430820122300d06092a864886f70d01010105000382010f003082010a0282010100a304bb22ab983d57e826729ab579d429e2e1e89580b1b0e35b8e2b299a64dfa15dedb009056ddb282ece62a262feb488da12eb38eb219dc0412b01527b8877d31c8fc7bab988b56a09e773e81140a7d1ccca628d2de58f0ba650d2a850c328eaf5ab25878a9a961ca967b83f0cd5f7f952132fc21bd57070f08fc012ca06cb9ae1d9ca337a77d6f8ecb9f16844424813d2c0c2a4ae5e60feb6a605fcb4dd075902d459189863f5a563e0900c7d5db2067af385eaebd403ae5e843e5fff15ed69bcf939367275cf77524df3c9902cb93de5c923533f1f2498215c079929bdc63aece76e863a6b97746333bd681831f0788d76bffc9e8e5d2a86a74d90dc271a390203010001a3453043301d0603551d0e04160414e59d5930824758ccacfa085436867b3ab5044df030120603551d130101ff040830060101ff020103300e0603551d0f0101ff040403020106300d06092a864886f70d01010505000382010100850c5d8ee46f51684205a0ddbb4f27258403bdf764fd2dd730e3a41017ebda2929b6793f76f6191323b8100af958a4d46170bd04616a128a17d50abdc5bc307cd6e90c258d86404feccca37e38c637114feddd68318e4cd2b30174eebe755e07481a7f70ff165c84c07985b805fd7fbe6511a30fc002b4f852373904d5a9317a18bfa02af41299f7a34582e33c5ef59d9eb5c89e7c2ec8a49e4e08144b6dfd706d6b1a63bd64e61fb7cef0f29f2ebb1bb7f250887392c2e2e3168d9a3202ab8e18dde91011ee7e35ab90af3e30947ad0333da7650ff5fc8e9e62cf47442c015dbb1db532d247d2382ed0fe81dc326a1eb5ee3cd5fce7811d19c32442ea6339a9 | C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe | N/A |
| Set value (data) | \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D4DE20D05E66FC53FE1A50882C78DB2852CAE474\Blob = 19000000010000001000000068cb42b035ea773e52ef50ecf50ec5290f0000000100000014000000ce0e658aa3e847e467a147b3049191093d055e6f0b0000000100000034000000420061006c00740069006d006f007200650020004300790062006500720054007200750073007400200052006f006f007400000053000000010000002400000030223020060a2b06010401b13e01640130123010060a2b0601040182373c0101030200c0140000000100000014000000e59d5930824758ccacfa085436867b3ab5044df01d0000000100000010000000918ad43a9475f78bb5243de886d8103c09000000010000000c000000300a06082b06010505070301030000000100000014000000d4de20d05e66fc53fe1a50882c78db2852cae474040000000100000010000000acb694a59c17e0d791529bb19706a6e420000000010000007b030000308203773082025fa0030201020204020000b9300d06092a864886f70d0101050500305a310b300906035504061302494531123010060355040a130942616c74696d6f726531133011060355040b130a43796265725472757374312230200603550403131942616c74696d6f7265204379626572547275737420526f6f74301e170d3030303531323138343630305a170d3235303531323233353930305a305a310b300906035504061302494531123010060355040a130942616c74696d6f726531133011060355040b130a43796265725472757374312230200603550403131942616c74696d6f7265204379626572547275737420526f6f7430820122300d06092a864886f70d01010105000382010f003082010a0282010100a304bb22ab983d57e826729ab579d429e2e1e89580b1b0e35b8e2b299a64dfa15dedb009056ddb282ece62a262feb488da12eb38eb219dc0412b01527b8877d31c8fc7bab988b56a09e773e81140a7d1ccca628d2de58f0ba650d2a850c328eaf5ab25878a9a961ca967b83f0cd5f7f952132fc21bd57070f08fc012ca06cb9ae1d9ca337a77d6f8ecb9f16844424813d2c0c2a4ae5e60feb6a605fcb4dd075902d459189863f5a563e0900c7d5db2067af385eaebd403ae5e843e5fff15ed69bcf939367275cf77524df3c9902cb93de5c923533f1f2498215c079929bdc63aece76e863a6b97746333bd681831f0788d76bffc9e8e5d2a86a74d90dc271a390203010001a3453043301d0603551d0e04160414e59d5930824758ccacfa085436867b3ab5044df030120603551d130101ff040830060101ff020103300e0603551d0f0101ff040403020106300d06092a864886f70d01010505000382010100850c5d8ee46f51684205a0ddbb4f27258403bdf764fd2dd730e3a41017ebda2929b6793f76f6191323b8100af958a4d46170bd04616a128a17d50abdc5bc307cd6e90c258d86404feccca37e38c637114feddd68318e4cd2b30174eebe755e07481a7f70ff165c84c07985b805fd7fbe6511a30fc002b4f852373904d5a9317a18bfa02af41299f7a34582e33c5ef59d9eb5c89e7c2ec8a49e4e08144b6dfd706d6b1a63bd64e61fb7cef0f29f2ebb1bb7f250887392c2e2e3168d9a3202ab8e18dde91011ee7e35ab90af3e30947ad0333da7650ff5fc8e9e62cf47442c015dbb1db532d247d2382ed0fe81dc326a1eb5ee3cd5fce7811d19c32442ea6339a9 | C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D4DE20D05E66FC53FE1A50882C78DB2852CAE474 | C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe | N/A |
| Set value (data) | \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D4DE20D05E66FC53FE1A50882C78DB2852CAE474\Blob = 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 | C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe | N/A |
Suspicious behavior: GetForegroundWindowSpam
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe | N/A |
Suspicious use of AdjustPrivilegeToken
| Description | Indicator | Process | Target |
| Token: SeDebugPrivilege | N/A | C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe | N/A |
Suspicious use of WriteProcessMemory
Processes
C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe
"C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe"
C:\Windows\system32\cmd.exe
"cmd.exe" /C chcp 65001 && netsh wlan show profile | findstr All
C:\Windows\system32\chcp.com
chcp 65001
C:\Windows\system32\netsh.exe
netsh wlan show profile
C:\Windows\system32\findstr.exe
findstr All
C:\Windows\system32\cmd.exe
"cmd.exe" /C chcp 65001 && netsh wlan show profile name=65001 key=clear | findstr Key
C:\Windows\system32\chcp.com
chcp 65001
C:\Windows\system32\netsh.exe
netsh wlan show profile name=65001 key=clear
C:\Windows\system32\findstr.exe
findstr Key
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "63935142-188721675018396177442005937145-8337802132074394173-278335376-581559510"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "-21101262681228916554-1549011171-1634369288-147635976610066249401957806289563434151"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "220948474-12773212731063404277-1091699545-5052832266579632341495475607-545812774"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "-391405138-389509062-2056671285-20683557981799940592-28466316-807673290-1572761909"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "-263878204-517960769-973606663-188419364420070907221637056417-2058436996182438850"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "912730716184596431213866435121484432619-1309380266-587767636-18784978751553105794"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "184632464418299494141636836034-1688410349-2099892891-16437734361284248331197047708"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "1269026256-1018088266770613599846351108-210532909810700612201993414794-2063793664"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "186628348-121977708720151128731297226861-2032779668-1796134282-993206225816093343"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "-1247982441-2108147580-1624721370637652118-1867257297-145929831218026368031924944760"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "11601350541379820960-201487492318079165921345333060-12149185-1592750026-789671353"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "1154942892-1653634720201217429-1851167727-19449010721535788216-1786153562-834661844"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "-1420203569-48562501350444449314825240151406046832-2107830329-1908179973727233454"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "-404567932071529415-282572205-10532821961102646498-1456604512-2144494392-1422687116"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "14262552331975596385-1435033303642714169-12208162311878913254-7799654952090156629"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "-1494964443-2128510666-1837736634-208819134-53421964-1871793572-1152443553-1701291903"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "1596728470-20298210891370581141182629041-201083370577768722-277064206-1067857984"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "19585647511667803042-680125141728166901738676974-267113561485054047841226672"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "-1471492287-17536219512850330173270670851127317615-1385811520-2714745671265028031"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "86566113116846121732089941757845442963-1634425168-72880887919597923951578926808"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "-15854267856938329324512955092012978158-1299405660-237506962-1872847824474562828"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "435541304894129748-1370752505-16955821251660361702683797524-959552452854663769"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "-1480640217-689488253136748521-61590955-141389564748210141320385600792093880254"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "119125815428738072520937540171320690530159206500969768471-15607741391566027324"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "-56665035135436662118540483431102964319-11480027471087450953-14898675471655943836"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "1855641148-788750423-1814765096230035201412189476102593852112631258881183535409"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "-2132421804-18003395667930981331784401708478191057-385727865-1622206509172983732"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "10345732831558737142-1075897827-17918013521952831084-15793248032076210029-922420461"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "-116689904021036016821851209352102833159-877711897-11343752561617151645-40168088"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "-17717479-2086596668015007089623256871171374018-489746328-1057005141804246900"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "-453602927-97625200253953836-7276723411799145211-335274612-273204548-309380893"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "-3014168611930310983-20373721751989879681-726428890-1228386372-21431933971504891659"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "-5927361671812699670-133804272-79259796-14915895545688878583696012691460423531"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "2049780607443191153-19938146071772597345103597546820145714001618641560-250462690"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "-2056622332-142606185210418823-1512183327557680185-966157427-12681683122142585830"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "-670949500-45424207613810502411190695814-9864119631175504346-1592944912-1161912177"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "-2103223616-2347974994626924771887575781141372651515377676011554071448-1394869539"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "19642592292032962846-1945921487337030411693180178-1741439700-435451637204992031"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "8199573881342195898126376397-1124048111-1874699171-1311351025221962295217403342"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "2029754623-21134490451782942021846423857-137457096-20190539481041136366-115719742"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "-1016632039-12107299533578033811174728516-150047371611141546562032717552-1769317658"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "216275748926653868-2128636838-1385031345-1961816476771848339980587207-575154568"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "-1587998694-125875889-1668208914-583768407-306596813-888827270185925158-1276504183"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "877038489-141160841-1798678854957505142-804873852-205586058310226770921891088198"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "560389742-813491278820580257-1905457693134623013-1467759242-68276888-419696150"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "-872559118-1884192637-237580269-41277185053628947820481634887702384041978802166"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "1837392045-30619087-2980720071174544018112139321138836626517328435031096472043"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "155195814411732552861308390500585883349-584730907-1920889524526627953799440790"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "-1018394631100354440-1564184621-431545953-1337399035633749705509122076-1464837960"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "7346761413150382671296194721-1917254161572644728177950907717491318451240073547"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "39964249-310264347-1142761348124126078-433325999134318074972470399-2139216775"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "894911366-49319681419143706941647038515-1790148031195873641-4903618601366660753"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "1834035104-86340097-14035408161259388671-385425339-47510806618478390401097885961"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "112202864-2119443030-1327842267-9036372621329218390-1547229772-9164295961786122812"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "-66269195920445378204701421836854950266802360951411153527-426795143-642227026"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "457593208-2008685451-163804319150507174920059778371614488837-720904473-555529482"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "-25515912-77319018790627171419325611421468236392500344658-48860066368002119"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "978751230-3746779662036503132-15523272661398533126613354447857372091985427923"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "-189166171817385449651368732204-1268847893363066351-1979720978-1697794094-775866489"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "-10488113081597709474272344586875504205-1370296698-544423725-13967062971108459759"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "1694590804-891580020-351285429-628199587-1584515398-1883258782967606561504959736"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "1906852469-148812108311088257-1956801488-5952709271310492401204385072-1805630141"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "-682832297-190767216920114138318992608481077740117295939774-1829280731-1922810401"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "-1308485351-817246985969458468-368335423640403938385327326612527605388219062"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "440293710544740863-173180551819343319931870929547602140231497837001693779149"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "1006089897-318702221-4874899481574553783387834017106441347720456943311960129815"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "1797051624-20639591771004664614695119613-1833817286213782411770389882222768979"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "896416500-883926127509844091-595898336-3586101431810020594-328417293-2090476114"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "-18997281741761437304-2040962075-354120213-1374751694-1978424052-1333779743-739353020"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "-1448402159-1370709683488265516-1810594908-11229475821072534141496912056-1926439311"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "12620025392064208616-127614817912695120151674904016-549686233-2619643551869333056"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "-12643256821663853083277012112770473991267366154-14731932571648309934-1024145606"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "-526870005616218624-5482562312012034920957777516-171474612820396264021258242407"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "-759744150-457963686-626551519-579966210-986533555-457013739-589850119-1768639523"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "460989418-355205928-1124838941-1578704239-812429006-9468847861533439777-2053068624"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "2142764001204863620-1611817070-461975005-862435280149042960491052212556746956"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "1349869349-505546012-1674753924-2168282301884980037-388017659-1586510388-386762440"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "133680487489444208-480971174-3865341441396732919682041920668872531-619025378"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "-1893160410640207697891074800-19477010599541672201518055044-759175758-211669778"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "604494605-6778851101015661432-1385764879-1267383351348352236-144244033611029486"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "1121562912-433401321142244792-5114989071499717212-16093686931539302680-2057208743"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "-1120500000-18574679182125260493-17965299741801718036128738891-583402171660972831"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "-3175834821368549232-77080568070777580457627327013018605321993090641418631875"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "602164142-387519640-1571843179-903013239153247161090651218-8540400601712902145"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
C:\Windows\system32\conhost.exe
\??\C:\Windows\system32\conhost.exe "-1583957688-19358862271882136176167512708754491174674804688721304580171808094385"
C:\Windows\System32\cmd.exe
"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots
Network
| Country | Destination | Domain | Proto |
| US | 8.8.8.8:53 | checkip.dyndns.org | udp |
| BR | 132.226.247.73:80 | checkip.dyndns.org | tcp |
| US | 8.8.8.8:53 | api.anonfiles.com | udp |
| US | 8.8.8.8:53 | discord.com | udp |
| US | 162.159.128.233:443 | discord.com | tcp |
| US | 162.159.128.233:443 | discord.com | tcp |
| US | 162.159.128.233:443 | discord.com | tcp |
| US | 162.159.128.233:443 | discord.com | tcp |
Files
memory/580-0-0x000007FEF5AC3000-0x000007FEF5AC4000-memory.dmp
memory/580-1-0x00000000000E0000-0x00000000000F6000-memory.dmp
memory/580-2-0x0000000000590000-0x000000000059A000-memory.dmp
memory/580-3-0x0000000001EA0000-0x0000000001EBA000-memory.dmp
memory/580-4-0x000007FEF5AC0000-0x000007FEF64AC000-memory.dmp
C:\Users\Admin\AppData\Local\Temp\CabF450.tmp
| MD5 | 49aebf8cbd62d92ac215b2923fb1b9f5 |
| SHA1 | 1723be06719828dda65ad804298d0431f6aff976 |
| SHA256 | b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f |
| SHA512 | bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b |
C:\Users\Admin\AppData\Local\Temp\TarF481.tmp
| MD5 | 4ea6026cf93ec6338144661bf1202cd1 |
| SHA1 | a1dec9044f750ad887935a01430bf49322fbdcb7 |
| SHA256 | 8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8 |
| SHA512 | 6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b |
C:\Users\Admin\AppData\Local\Temp\passwords.txt
| MD5 | 68b329da9893e34099c7d8ad5cb9c940 |
| SHA1 | adc83b19e793491b1c6ea0fd8b46cd9f32e592fc |
| SHA256 | 01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b |
| SHA512 | be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09 |
memory/580-60-0x000007FEF5AC3000-0x000007FEF5AC4000-memory.dmp
memory/580-61-0x000007FEF5AC0000-0x000007FEF64AC000-memory.dmp
Analysis: behavioral14
Detonation Overview
Submitted
2024-08-14 21:32
Reported
2024-08-14 21:35
Platform
win10v2004-20240802-en
Max time kernel
148s
Max time network
151s
Command Line
Signatures
Processes
C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Newtonsoft.Json.dll,#1
Network
| Country | Destination | Domain | Proto |
| US | 8.8.8.8:53 | g.bing.com | udp |
| US | 204.79.197.237:443 | g.bing.com | tcp |
| US | 8.8.8.8:53 | 149.220.183.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 0.159.190.20.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 25.140.123.92.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 237.197.79.204.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 217.106.137.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 26.165.165.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 206.23.85.13.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 21.58.20.217.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 205.47.74.20.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 30.243.111.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 26.35.223.20.in-addr.arpa | udp |
| US | 8.8.8.8:53 | tse1.mm.bing.net | udp |
| US | 150.171.28.10:443 | tse1.mm.bing.net | tcp |
| US | 150.171.28.10:443 | tse1.mm.bing.net | tcp |
| US | 150.171.28.10:443 | tse1.mm.bing.net | tcp |
| US | 150.171.28.10:443 | tse1.mm.bing.net | tcp |
| US | 150.171.28.10:443 | tse1.mm.bing.net | tcp |