Malware Analysis Report

2024-10-18 21:30

Sample ID 240814-1d23kswcne
Target Bltized.zip
SHA256 1d54f75b31713396cf394bcc659ec80470eff7a3c90bb66b179e80775286e9c5
Tags
discovery stormkitty agilenet credential_access evasion persistence privilege_escalation spyware stealer
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral16

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral10

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral11

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral12

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral15

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral8

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral13

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral3

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral4

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral5

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral6

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral7

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral9

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral14

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

1d54f75b31713396cf394bcc659ec80470eff7a3c90bb66b179e80775286e9c5

Threat Level: Known bad

The file Bltized.zip was found to be: Known bad.

Malicious Activity Summary

discovery stormkitty agilenet credential_access evasion persistence privilege_escalation spyware stealer

Stormkitty family

StormKitty payload

StormKitty

Credentials from Password Stores: Credentials from Web Browsers

Disables Task Manager via registry modification

Reads user/profile data of web browsers

Checks computer location settings

Loads dropped DLL

Obfuscated with Agile.Net obfuscator

Adds Run key to start application

Legitimate hosting services abused for malware hosting/C2

Looks up external IP address via web service

Browser Information Discovery

Event Triggered Execution: Netsh Helper DLL

System Network Configuration Discovery: Wi-Fi Discovery

System Location Discovery: System Language Discovery

Program crash

Enumerates physical storage devices

Unsigned PE

Suspicious behavior: GetForegroundWindowSpam

Suspicious use of WriteProcessMemory

Suspicious use of AdjustPrivilegeToken

Suspicious use of FindShellTrayWindow

Modifies system certificate store

Modifies Internet Explorer settings

Suspicious use of SetWindowsHookEx

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-08-14 21:32

Signatures

StormKitty payload

Description Indicator Process Target
N/A N/A N/A N/A

Stormkitty family

stormkitty

Unsigned PE

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Analysis: behavioral16

Detonation Overview

Submitted

2024-08-14 21:32

Reported

2024-08-14 21:35

Platform

win10v2004-20240802-en

Max time kernel

143s

Max time network

130s

Command Line

"C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\UltraEmbeddable.exe"

Signatures

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\UltraEmbeddable.exe N/A

Processes

C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\UltraEmbeddable.exe

"C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\UltraEmbeddable.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1104 -ip 1104

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 1104 -s 872

Network

Country Destination Domain Proto
US 8.8.8.8:53 97.17.167.52.in-addr.arpa udp
US 8.8.8.8:53 25.140.123.92.in-addr.arpa udp
US 8.8.8.8:53 g.bing.com udp
US 204.79.197.237:443 g.bing.com tcp
US 8.8.8.8:53 140.32.126.40.in-addr.arpa udp
US 8.8.8.8:53 237.197.79.204.in-addr.arpa udp
US 8.8.8.8:53 55.36.223.20.in-addr.arpa udp
US 8.8.8.8:53 149.220.183.52.in-addr.arpa udp
US 8.8.8.8:53 26.165.165.52.in-addr.arpa udp
US 8.8.8.8:53 198.187.3.20.in-addr.arpa udp
US 8.8.8.8:53 147.142.123.92.in-addr.arpa udp
US 8.8.8.8:53 40.58.20.217.in-addr.arpa udp
US 8.8.8.8:53 205.47.74.20.in-addr.arpa udp
US 8.8.8.8:53 240.143.123.92.in-addr.arpa udp
US 8.8.8.8:53 23.236.111.52.in-addr.arpa udp
US 8.8.8.8:53 tse1.mm.bing.net udp
US 150.171.27.10:443 tse1.mm.bing.net tcp
US 150.171.27.10:443 tse1.mm.bing.net tcp
US 150.171.27.10:443 tse1.mm.bing.net tcp
US 150.171.27.10:443 tse1.mm.bing.net tcp
US 150.171.27.10:443 tse1.mm.bing.net tcp
US 8.8.8.8:53 57.169.31.20.in-addr.arpa udp
US 8.8.8.8:53 10.27.171.150.in-addr.arpa udp

Files

memory/1104-0-0x0000000074D3E000-0x0000000074D3F000-memory.dmp

memory/1104-1-0x0000000000F90000-0x000000000100A000-memory.dmp

Analysis: behavioral1

Detonation Overview

Submitted

2024-08-14 21:32

Reported

2024-08-14 21:35

Platform

win7-20240704-en

Max time kernel

121s

Max time network

121s

Command Line

"C:\Users\Admin\AppData\Local\Temp\BlitzedV12\BlitzedGrabberV12.exe"

Signatures

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\BlitzedGrabberV12.exe N/A

Obfuscated with Agile.Net obfuscator

agilenet
Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\BlitzedV12\BlitzedGrabberV12.exe N/A

Suspicious use of SetWindowsHookEx

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\BlitzedGrabberV12.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\BlitzedGrabberV12.exe N/A

Processes

C:\Users\Admin\AppData\Local\Temp\BlitzedV12\BlitzedGrabberV12.exe

"C:\Users\Admin\AppData\Local\Temp\BlitzedV12\BlitzedGrabberV12.exe"

Network

N/A

Files

memory/2220-0-0x000000007418E000-0x000000007418F000-memory.dmp

memory/2220-1-0x00000000010C0000-0x00000000012B0000-memory.dmp

memory/2220-2-0x0000000074180000-0x000000007486E000-memory.dmp

memory/2220-3-0x0000000005250000-0x0000000005442000-memory.dmp

\Users\Admin\AppData\Local\Temp\dcfb00f9-5ae7-4197-ba59-e48107e40d35\GunaDotNetRT.dll

MD5 9af5eb006bb0bab7f226272d82c896c7
SHA1 c2a5bb42a5f08f4dc821be374b700652262308f0
SHA256 77dc05a6bda90757f66552ee3f469b09f1e00732b4edca0f542872fb591ed9db
SHA512 7badd41be4c1039302fda9bba19d374ec9446ce24b7db33b66bee4ef38180d1abcd666d2aea468e7e452aa1e1565eedfefed582bf1c2fe477a4171d99d48772a

memory/2220-12-0x0000000005250000-0x000000000543E000-memory.dmp

memory/2220-15-0x0000000005250000-0x000000000543E000-memory.dmp

memory/2220-13-0x0000000005250000-0x000000000543E000-memory.dmp

memory/2220-17-0x0000000005250000-0x000000000543E000-memory.dmp

memory/2220-21-0x0000000005250000-0x000000000543E000-memory.dmp

memory/2220-23-0x0000000005250000-0x000000000543E000-memory.dmp

memory/2220-25-0x0000000005250000-0x000000000543E000-memory.dmp

memory/2220-27-0x0000000005250000-0x000000000543E000-memory.dmp

memory/2220-31-0x0000000005250000-0x000000000543E000-memory.dmp

memory/2220-35-0x0000000005250000-0x000000000543E000-memory.dmp

memory/2220-37-0x0000000005250000-0x000000000543E000-memory.dmp

memory/2220-39-0x0000000005250000-0x000000000543E000-memory.dmp

memory/2220-33-0x0000000005250000-0x000000000543E000-memory.dmp

memory/2220-29-0x0000000005250000-0x000000000543E000-memory.dmp

memory/2220-19-0x0000000005250000-0x000000000543E000-memory.dmp

memory/2220-11-0x0000000073F80000-0x0000000074000000-memory.dmp

memory/2220-10-0x00000000739A0000-0x00000000739D7000-memory.dmp

memory/2220-41-0x0000000005250000-0x000000000543E000-memory.dmp

memory/2220-49-0x0000000005250000-0x000000000543E000-memory.dmp

memory/2220-60-0x0000000005250000-0x000000000543E000-memory.dmp

memory/2220-65-0x0000000005250000-0x000000000543E000-memory.dmp

memory/2220-73-0x0000000005250000-0x000000000543E000-memory.dmp

memory/2220-51-0x0000000005250000-0x000000000543E000-memory.dmp

memory/2220-71-0x0000000005250000-0x000000000543E000-memory.dmp

memory/2220-69-0x0000000005250000-0x000000000543E000-memory.dmp

memory/2220-67-0x0000000005250000-0x000000000543E000-memory.dmp

memory/2220-63-0x0000000005250000-0x000000000543E000-memory.dmp

memory/2220-61-0x0000000005250000-0x000000000543E000-memory.dmp

memory/2220-57-0x0000000005250000-0x000000000543E000-memory.dmp

memory/2220-55-0x0000000005250000-0x000000000543E000-memory.dmp

memory/2220-53-0x0000000005250000-0x000000000543E000-memory.dmp

memory/2220-47-0x0000000005250000-0x000000000543E000-memory.dmp

memory/2220-45-0x0000000005250000-0x000000000543E000-memory.dmp

memory/2220-43-0x0000000005250000-0x000000000543E000-memory.dmp

memory/2220-11666-0x0000000074180000-0x000000007486E000-memory.dmp

memory/2220-11667-0x0000000074180000-0x000000007486E000-memory.dmp

memory/2220-11668-0x0000000074180000-0x000000007486E000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\BlitzedV12\BlitzedGrabberV12.exe.Config

MD5 c6e6fc3cdec0ad213d9330a9b630fd5c
SHA1 ed4278e0e4b9d1b47fbe92ca2f98af62e5d6c027
SHA256 96c2db8d8037a20cc6550c935f9a11da70f84a2bc64a1be1807b06bc1bda2492
SHA512 37ee70ae328547b684db668ce59c9f7eea672184fb1f5ed41341a0fab84bbe0419f0706742832fc6f1ae78e474cd1d3f5f757fc9c44ed0ca557101a733532e0f

memory/2220-11676-0x000000007418E000-0x000000007418F000-memory.dmp

memory/2220-11677-0x0000000074180000-0x000000007486E000-memory.dmp

memory/2220-11678-0x00000000739A0000-0x00000000739D7000-memory.dmp

memory/2220-11679-0x0000000074180000-0x000000007486E000-memory.dmp

memory/2220-11680-0x0000000074180000-0x000000007486E000-memory.dmp

Analysis: behavioral10

Detonation Overview

Submitted

2024-08-14 21:32

Reported

2024-08-14 21:35

Platform

win10v2004-20240802-en

Max time kernel

150s

Max time network

106s

Command Line

"C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe"

Signatures

StormKitty

stealer stormkitty

StormKitty payload

Description Indicator Process Target
N/A N/A N/A N/A

Credentials from Password Stores: Credentials from Web Browsers

credential_access stealer

Disables Task Manager via registry modification

evasion

Checks computer location settings

Description Indicator Process Target
Key value queried \REGISTRY\USER\S-1-5-21-523280732-2327480845-3730041215-1000\Control Panel\International\Geo\Nation C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe N/A

Reads user/profile data of web browsers

spyware stealer

Adds Run key to start application

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-523280732-2327480845-3730041215-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\BnFKy = "C:\\Users\\Admin\\AppData\\Local\\Temp\\BlitzedV12\\Resources\\Blitzed.exe" C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe N/A

Legitimate hosting services abused for malware hosting/C2

Description Indicator Process Target
N/A discord.com N/A N/A
N/A discord.com N/A N/A
N/A discord.com N/A N/A
N/A discord.com N/A N/A
N/A discord.com N/A N/A

Looks up external IP address via web service

Description Indicator Process Target
N/A checkip.dyndns.org N/A N/A

Browser Information Discovery

discovery

Enumerates physical storage devices

Event Triggered Execution: Netsh Helper DLL

persistence privilege_escalation
Description Indicator Process Target
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A

System Network Configuration Discovery: Wi-Fi Discovery

discovery
Description Indicator Process Target
N/A N/A C:\Windows\SYSTEM32\cmd.exe N/A
N/A N/A C:\Windows\system32\netsh.exe N/A
N/A N/A C:\Windows\SYSTEM32\cmd.exe N/A
N/A N/A C:\Windows\system32\netsh.exe N/A

Suspicious behavior: GetForegroundWindowSpam

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 4652 wrote to memory of 3476 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\SYSTEM32\cmd.exe
PID 4652 wrote to memory of 3476 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\SYSTEM32\cmd.exe
PID 3476 wrote to memory of 2816 N/A C:\Windows\SYSTEM32\cmd.exe C:\Windows\system32\chcp.com
PID 3476 wrote to memory of 2816 N/A C:\Windows\SYSTEM32\cmd.exe C:\Windows\system32\chcp.com
PID 3476 wrote to memory of 3996 N/A C:\Windows\SYSTEM32\cmd.exe C:\Windows\system32\netsh.exe
PID 3476 wrote to memory of 3996 N/A C:\Windows\SYSTEM32\cmd.exe C:\Windows\system32\netsh.exe
PID 3476 wrote to memory of 3212 N/A C:\Windows\SYSTEM32\cmd.exe C:\Windows\system32\findstr.exe
PID 3476 wrote to memory of 3212 N/A C:\Windows\SYSTEM32\cmd.exe C:\Windows\system32\findstr.exe
PID 4652 wrote to memory of 2172 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\SYSTEM32\cmd.exe
PID 4652 wrote to memory of 2172 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\SYSTEM32\cmd.exe
PID 2172 wrote to memory of 4452 N/A C:\Windows\SYSTEM32\cmd.exe C:\Windows\system32\chcp.com
PID 2172 wrote to memory of 4452 N/A C:\Windows\SYSTEM32\cmd.exe C:\Windows\system32\chcp.com
PID 2172 wrote to memory of 1560 N/A C:\Windows\SYSTEM32\cmd.exe C:\Windows\system32\netsh.exe
PID 2172 wrote to memory of 1560 N/A C:\Windows\SYSTEM32\cmd.exe C:\Windows\system32\netsh.exe
PID 2172 wrote to memory of 612 N/A C:\Windows\SYSTEM32\cmd.exe C:\Windows\system32\findstr.exe
PID 2172 wrote to memory of 612 N/A C:\Windows\SYSTEM32\cmd.exe C:\Windows\system32\findstr.exe
PID 4652 wrote to memory of 3256 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\cmd.exe
PID 4652 wrote to memory of 3256 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\cmd.exe
PID 4652 wrote to memory of 4040 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\cmd.exe
PID 4652 wrote to memory of 4040 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\cmd.exe
PID 4652 wrote to memory of 4488 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\cmd.exe
PID 4652 wrote to memory of 4488 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\cmd.exe
PID 4652 wrote to memory of 1840 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\cmd.exe
PID 4652 wrote to memory of 1840 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\cmd.exe
PID 4652 wrote to memory of 776 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\cmd.exe
PID 4652 wrote to memory of 776 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\cmd.exe
PID 4652 wrote to memory of 1088 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\cmd.exe
PID 4652 wrote to memory of 1088 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\cmd.exe
PID 4652 wrote to memory of 3636 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\cmd.exe
PID 4652 wrote to memory of 3636 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\cmd.exe
PID 4652 wrote to memory of 4848 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\cmd.exe
PID 4652 wrote to memory of 4848 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\cmd.exe
PID 4652 wrote to memory of 656 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\cmd.exe
PID 4652 wrote to memory of 656 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\cmd.exe
PID 4652 wrote to memory of 1136 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\cmd.exe
PID 4652 wrote to memory of 1136 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\cmd.exe
PID 4652 wrote to memory of 4448 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\cmd.exe
PID 4652 wrote to memory of 4448 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\cmd.exe
PID 4652 wrote to memory of 1844 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\Conhost.exe
PID 4652 wrote to memory of 1844 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\Conhost.exe
PID 4652 wrote to memory of 2256 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\cmd.exe
PID 4652 wrote to memory of 2256 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\cmd.exe
PID 4652 wrote to memory of 4312 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\cmd.exe
PID 4652 wrote to memory of 4312 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\cmd.exe
PID 4652 wrote to memory of 3832 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\Conhost.exe
PID 4652 wrote to memory of 3832 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\Conhost.exe
PID 4652 wrote to memory of 916 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\cmd.exe
PID 4652 wrote to memory of 916 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\cmd.exe
PID 4652 wrote to memory of 3852 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\cmd.exe
PID 4652 wrote to memory of 3852 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\cmd.exe
PID 4652 wrote to memory of 220 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\cmd.exe
PID 4652 wrote to memory of 220 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\cmd.exe
PID 4652 wrote to memory of 1456 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\Conhost.exe
PID 4652 wrote to memory of 1456 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\Conhost.exe
PID 4652 wrote to memory of 2404 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\cmd.exe
PID 4652 wrote to memory of 2404 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\cmd.exe
PID 4652 wrote to memory of 5068 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\cmd.exe
PID 4652 wrote to memory of 5068 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\cmd.exe
PID 4652 wrote to memory of 3444 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\cmd.exe
PID 4652 wrote to memory of 3444 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\cmd.exe
PID 4652 wrote to memory of 2272 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\cmd.exe
PID 4652 wrote to memory of 2272 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\cmd.exe
PID 4652 wrote to memory of 1932 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\cmd.exe
PID 4652 wrote to memory of 1932 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\cmd.exe

Processes

C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe

"C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe"

C:\Windows\SYSTEM32\cmd.exe

"cmd.exe" /C chcp 65001 && netsh wlan show profile | findstr All

C:\Windows\system32\chcp.com

chcp 65001

C:\Windows\system32\netsh.exe

netsh wlan show profile

C:\Windows\system32\findstr.exe

findstr All

C:\Windows\SYSTEM32\cmd.exe

"cmd.exe" /C chcp 65001 && netsh wlan show profile name=65001 key=clear | findstr Key

C:\Windows\system32\chcp.com

chcp 65001

C:\Windows\system32\netsh.exe

netsh wlan show profile name=65001 key=clear

C:\Windows\system32\findstr.exe

findstr Key

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\Conhost.exe

\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\Conhost.exe

\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\Conhost.exe

\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\Conhost.exe

\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\Conhost.exe

\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\Conhost.exe

\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\Conhost.exe

\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\Conhost.exe

\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\Conhost.exe

\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\Conhost.exe

\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\Conhost.exe

\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\mousocoreworker.exe

C:\Windows\System32\mousocoreworker.exe -Embedding

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\Conhost.exe

\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\Conhost.exe

\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\Conhost.exe

\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\Conhost.exe

\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\Conhost.exe

\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\Conhost.exe

\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\Conhost.exe

\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\Conhost.exe

\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\Conhost.exe

\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\Conhost.exe

\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\Conhost.exe

\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\Conhost.exe

\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\Conhost.exe

\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\Conhost.exe

\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\Conhost.exe

\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\Conhost.exe

\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\Conhost.exe

\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\Conhost.exe

\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\Conhost.exe

\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\Conhost.exe

\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\Conhost.exe

\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

Network

Country Destination Domain Proto
US 8.8.8.8:53 217.106.137.52.in-addr.arpa udp
US 8.8.8.8:53 checkip.dyndns.org udp
DE 193.122.6.168:80 checkip.dyndns.org tcp
US 8.8.8.8:53 api.anonfiles.com udp
US 8.8.8.8:53 discord.com udp
US 162.159.128.233:443 discord.com tcp
US 8.8.8.8:53 168.6.122.193.in-addr.arpa udp
US 8.8.8.8:53 100.58.20.217.in-addr.arpa udp
US 8.8.8.8:53 233.128.159.162.in-addr.arpa udp
US 162.159.128.233:443 discord.com tcp
US 8.8.8.8:53 64.159.190.20.in-addr.arpa udp
US 162.159.128.233:443 discord.com tcp
US 162.159.128.233:443 discord.com tcp
US 8.8.8.8:53 228.249.119.40.in-addr.arpa udp
US 8.8.8.8:53 28.118.140.52.in-addr.arpa udp
US 8.8.8.8:53 103.169.127.40.in-addr.arpa udp
US 8.8.8.8:53 18.31.95.13.in-addr.arpa udp
US 8.8.8.8:53 147.142.123.92.in-addr.arpa udp
US 8.8.8.8:53 25.140.123.92.in-addr.arpa udp
US 8.8.8.8:53 240.143.123.92.in-addr.arpa udp
US 8.8.8.8:53 43.229.111.52.in-addr.arpa udp

Files

memory/4652-0-0x00000000000B0000-0x00000000000C6000-memory.dmp

memory/4652-1-0x00007FFB88243000-0x00007FFB88245000-memory.dmp

memory/4652-2-0x0000000000A40000-0x0000000000A4A000-memory.dmp

memory/4652-3-0x0000000000A80000-0x0000000000A9A000-memory.dmp

memory/4652-4-0x00007FFB88240000-0x00007FFB88D01000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\passwords.txt

MD5 68b329da9893e34099c7d8ad5cb9c940
SHA1 adc83b19e793491b1c6ea0fd8b46cd9f32e592fc
SHA256 01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b
SHA512 be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09

memory/4652-26-0x0000000002430000-0x0000000002442000-memory.dmp

memory/4652-27-0x000000001C250000-0x000000001C28C000-memory.dmp

memory/4652-28-0x000000001BEA0000-0x000000001C00A000-memory.dmp

memory/4652-30-0x00007FFB88243000-0x00007FFB88245000-memory.dmp

memory/4652-32-0x00007FFB88240000-0x00007FFB88D01000-memory.dmp

Analysis: behavioral11

Detonation Overview

Submitted

2024-08-14 21:32

Reported

2024-08-14 21:35

Platform

win7-20240705-en

Max time kernel

16s

Max time network

17s

Command Line

rundll32.exe C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\BouncyCastle.Crypto.dll,#1

Signatures

N/A

Processes

C:\Windows\system32\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\BouncyCastle.Crypto.dll,#1

Network

N/A

Files

N/A

Analysis: behavioral12

Detonation Overview

Submitted

2024-08-14 21:32

Reported

2024-08-14 21:35

Platform

win10v2004-20240802-en

Max time kernel

139s

Max time network

143s

Command Line

rundll32.exe C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\BouncyCastle.Crypto.dll,#1

Signatures

N/A

Processes

C:\Windows\system32\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\BouncyCastle.Crypto.dll,#1

Network

Country Destination Domain Proto
US 8.8.8.8:53 25.140.123.92.in-addr.arpa udp
US 8.8.8.8:53 140.32.126.40.in-addr.arpa udp
US 8.8.8.8:53 28.118.140.52.in-addr.arpa udp
US 8.8.8.8:53 97.17.167.52.in-addr.arpa udp
US 8.8.8.8:53 217.106.137.52.in-addr.arpa udp
US 8.8.8.8:53 26.165.165.52.in-addr.arpa udp
US 8.8.8.8:53 18.31.95.13.in-addr.arpa udp
US 8.8.8.8:53 172.210.232.199.in-addr.arpa udp
US 8.8.8.8:53 240.143.123.92.in-addr.arpa udp
US 8.8.8.8:53 43.229.111.52.in-addr.arpa udp
US 8.8.8.8:53 26.35.223.20.in-addr.arpa udp
US 8.8.8.8:53 tse1.mm.bing.net udp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 8.8.8.8:53 10.28.171.150.in-addr.arpa udp

Files

N/A

Analysis: behavioral15

Detonation Overview

Submitted

2024-08-14 21:32

Reported

2024-08-14 21:35

Platform

win7-20240704-en

Max time kernel

26s

Max time network

21s

Command Line

"C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\UltraEmbeddable.exe"

Signatures

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\UltraEmbeddable.exe N/A

Processes

C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\UltraEmbeddable.exe

"C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\UltraEmbeddable.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 2304 -s 552

Network

N/A

Files

memory/2304-0-0x000000007477E000-0x000000007477F000-memory.dmp

memory/2304-1-0x0000000001090000-0x000000000110A000-memory.dmp

memory/2304-2-0x000000007477E000-0x000000007477F000-memory.dmp

Analysis: behavioral8

Detonation Overview

Submitted

2024-08-14 21:32

Reported

2024-08-14 21:36

Platform

win10v2004-20240802-en

Max time kernel

150s

Max time network

163s

Command Line

rundll32.exe C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Anarchy.dll,#1

Signatures

N/A

Processes

C:\Windows\system32\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Anarchy.dll,#1

Network

Country Destination Domain Proto
US 8.8.8.8:53 217.106.137.52.in-addr.arpa udp
US 8.8.8.8:53 37.58.20.217.in-addr.arpa udp
US 8.8.8.8:53 57.169.31.20.in-addr.arpa udp
US 8.8.8.8:53 95.221.229.192.in-addr.arpa udp
US 8.8.8.8:53 0.159.190.20.in-addr.arpa udp
US 8.8.8.8:53 28.118.140.52.in-addr.arpa udp
US 8.8.8.8:53 26.165.165.52.in-addr.arpa udp
US 8.8.8.8:53 18.31.95.13.in-addr.arpa udp
US 8.8.8.8:53 147.142.123.92.in-addr.arpa udp
US 8.8.8.8:53 38.58.20.217.in-addr.arpa udp
US 8.8.8.8:53 43.58.199.20.in-addr.arpa udp
US 8.8.8.8:53 30.243.111.52.in-addr.arpa udp
US 8.8.8.8:53 tse1.mm.bing.net udp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 8.8.8.8:53 131.72.42.20.in-addr.arpa udp

Files

N/A

Analysis: behavioral13

Detonation Overview

Submitted

2024-08-14 21:32

Reported

2024-08-14 21:35

Platform

win7-20240708-en

Max time kernel

122s

Max time network

125s

Command Line

rundll32.exe C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Newtonsoft.Json.dll,#1

Signatures

N/A

Processes

C:\Windows\system32\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Newtonsoft.Json.dll,#1

Network

N/A

Files

N/A

Analysis: behavioral2

Detonation Overview

Submitted

2024-08-14 21:32

Reported

2024-08-14 21:35

Platform

win10v2004-20240802-en

Max time kernel

148s

Max time network

152s

Command Line

"C:\Users\Admin\AppData\Local\Temp\BlitzedV12\BlitzedGrabberV12.exe"

Signatures

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\BlitzedGrabberV12.exe N/A

Obfuscated with Agile.Net obfuscator

agilenet
Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\BlitzedV12\BlitzedGrabberV12.exe N/A

Suspicious use of SetWindowsHookEx

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\BlitzedGrabberV12.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\BlitzedGrabberV12.exe N/A

Processes

C:\Users\Admin\AppData\Local\Temp\BlitzedV12\BlitzedGrabberV12.exe

"C:\Users\Admin\AppData\Local\Temp\BlitzedV12\BlitzedGrabberV12.exe"

Network

Country Destination Domain Proto
US 8.8.8.8:53 149.220.183.52.in-addr.arpa udp
US 8.8.8.8:53 25.140.123.92.in-addr.arpa udp
US 8.8.8.8:53 22.160.190.20.in-addr.arpa udp
US 8.8.8.8:53 95.221.229.192.in-addr.arpa udp
US 8.8.8.8:53 13.86.106.20.in-addr.arpa udp
US 8.8.8.8:53 86.23.85.13.in-addr.arpa udp
US 8.8.8.8:53 g.bing.com udp
US 204.79.197.237:443 g.bing.com tcp
US 8.8.8.8:53 237.197.79.204.in-addr.arpa udp
US 8.8.8.8:53 57.169.31.20.in-addr.arpa udp
US 8.8.8.8:53 56.126.166.20.in-addr.arpa udp
US 8.8.8.8:53 192.142.123.92.in-addr.arpa udp
US 8.8.8.8:53 28.118.140.52.in-addr.arpa udp
US 8.8.8.8:53 217.106.137.52.in-addr.arpa udp
US 8.8.8.8:53 31.243.111.52.in-addr.arpa udp
US 8.8.8.8:53 205.47.74.20.in-addr.arpa udp
US 8.8.8.8:53 tse1.mm.bing.net udp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 8.8.8.8:53 26.35.223.20.in-addr.arpa udp
US 8.8.8.8:53 10.28.171.150.in-addr.arpa udp

Files

memory/2252-0-0x0000000074E7E000-0x0000000074E7F000-memory.dmp

memory/2252-1-0x0000000000E00000-0x0000000000FF0000-memory.dmp

memory/2252-2-0x0000000006140000-0x00000000066E4000-memory.dmp

memory/2252-3-0x00000000059C0000-0x0000000005A52000-memory.dmp

memory/2252-4-0x00000000059A0000-0x00000000059AA000-memory.dmp

memory/2252-5-0x0000000074E70000-0x0000000075620000-memory.dmp

memory/2252-6-0x0000000005D80000-0x0000000005F72000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\dcfb00f9-5ae7-4197-ba59-e48107e40d35\GunaDotNetRT.dll

MD5 9af5eb006bb0bab7f226272d82c896c7
SHA1 c2a5bb42a5f08f4dc821be374b700652262308f0
SHA256 77dc05a6bda90757f66552ee3f469b09f1e00732b4edca0f542872fb591ed9db
SHA512 7badd41be4c1039302fda9bba19d374ec9446ce24b7db33b66bee4ef38180d1abcd666d2aea468e7e452aa1e1565eedfefed582bf1c2fe477a4171d99d48772a

memory/2252-22-0x0000000005D80000-0x0000000005F6E000-memory.dmp

memory/2252-31-0x0000000071570000-0x00000000715A7000-memory.dmp

memory/2252-43-0x0000000005D80000-0x0000000005F6E000-memory.dmp

memory/2252-75-0x0000000005D80000-0x0000000005F6E000-memory.dmp

memory/2252-77-0x0000000005D80000-0x0000000005F6E000-memory.dmp

memory/2252-71-0x0000000005D80000-0x0000000005F6E000-memory.dmp

memory/2252-69-0x0000000005D80000-0x0000000005F6E000-memory.dmp

memory/2252-67-0x0000000005D80000-0x0000000005F6E000-memory.dmp

memory/2252-63-0x0000000005D80000-0x0000000005F6E000-memory.dmp

memory/2252-61-0x0000000005D80000-0x0000000005F6E000-memory.dmp

memory/2252-59-0x0000000005D80000-0x0000000005F6E000-memory.dmp

memory/2252-57-0x0000000005D80000-0x0000000005F6E000-memory.dmp

memory/2252-55-0x0000000005D80000-0x0000000005F6E000-memory.dmp

memory/2252-73-0x0000000005D80000-0x0000000005F6E000-memory.dmp

memory/2252-65-0x0000000005D80000-0x0000000005F6E000-memory.dmp

memory/2252-53-0x0000000005D80000-0x0000000005F6E000-memory.dmp

memory/2252-51-0x0000000005D80000-0x0000000005F6E000-memory.dmp

memory/2252-47-0x0000000005D80000-0x0000000005F6E000-memory.dmp

memory/2252-45-0x0000000005D80000-0x0000000005F6E000-memory.dmp

memory/2252-39-0x0000000005D80000-0x0000000005F6E000-memory.dmp

memory/2252-37-0x0000000005D80000-0x0000000005F6E000-memory.dmp

memory/2252-35-0x0000000005D80000-0x0000000005F6E000-memory.dmp

memory/2252-33-0x0000000005D80000-0x0000000005F6E000-memory.dmp

memory/2252-49-0x0000000005D80000-0x0000000005F6E000-memory.dmp

memory/2252-41-0x0000000005D80000-0x0000000005F6E000-memory.dmp

memory/2252-30-0x0000000005D80000-0x0000000005F6E000-memory.dmp

memory/2252-28-0x0000000005D80000-0x0000000005F6E000-memory.dmp

memory/2252-26-0x0000000005D80000-0x0000000005F6E000-memory.dmp

memory/2252-24-0x0000000005D80000-0x0000000005F6E000-memory.dmp

memory/2252-18-0x0000000005D80000-0x0000000005F6E000-memory.dmp

memory/2252-16-0x0000000005D80000-0x0000000005F6E000-memory.dmp

memory/2252-15-0x0000000005D80000-0x0000000005F6E000-memory.dmp

memory/2252-14-0x0000000073880000-0x0000000073909000-memory.dmp

memory/2252-20-0x0000000005D80000-0x0000000005F6E000-memory.dmp

memory/2252-11670-0x0000000006B90000-0x0000000006C2C000-memory.dmp

memory/2252-11671-0x0000000074E70000-0x0000000075620000-memory.dmp

memory/2252-11672-0x0000000074E70000-0x0000000075620000-memory.dmp

memory/2252-11673-0x0000000074E70000-0x0000000075620000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\BlitzedV12\BlitzedGrabberV12.exe.Config

MD5 c6e6fc3cdec0ad213d9330a9b630fd5c
SHA1 ed4278e0e4b9d1b47fbe92ca2f98af62e5d6c027
SHA256 96c2db8d8037a20cc6550c935f9a11da70f84a2bc64a1be1807b06bc1bda2492
SHA512 37ee70ae328547b684db668ce59c9f7eea672184fb1f5ed41341a0fab84bbe0419f0706742832fc6f1ae78e474cd1d3f5f757fc9c44ed0ca557101a733532e0f

memory/2252-11681-0x0000000074E70000-0x0000000075620000-memory.dmp

memory/2252-11682-0x0000000074E7E000-0x0000000074E7F000-memory.dmp

memory/2252-11683-0x0000000074E70000-0x0000000075620000-memory.dmp

memory/2252-11684-0x0000000071570000-0x00000000715A7000-memory.dmp

memory/2252-11685-0x0000000074E70000-0x0000000075620000-memory.dmp

Analysis: behavioral3

Detonation Overview

Submitted

2024-08-14 21:32

Reported

2024-08-14 21:35

Platform

win7-20240704-en

Max time kernel

70s

Max time network

138s

Command Line

"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\BlitzedV12\BlitzedGrabberV12.exe.xml"

Signatures

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLED.EXE N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Internet Explorer\iexplore.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A

Modifies Internet Explorer settings

adware spyware
Description Indicator Process Target
Set value (data) \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 C:\Program Files\Internet Explorer\IEXPLORE.EXE N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" C:\Program Files\Internet Explorer\IEXPLORE.EXE N/A
Key created \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\GPU C:\Program Files\Internet Explorer\IEXPLORE.EXE N/A
Key created \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\IETld\LowMic C:\Program Files\Internet Explorer\IEXPLORE.EXE N/A
Set value (str) \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" C:\Program Files\Internet Explorer\IEXPLORE.EXE N/A
Key created \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing C:\Program Files\Internet Explorer\IEXPLORE.EXE N/A
Key created \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic C:\Program Files\Internet Explorer\IEXPLORE.EXE N/A
Key created \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser C:\Program Files\Internet Explorer\IEXPLORE.EXE N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{D1057F21-5A84-11EF-B137-6E739D7B0BBB} = "0" C:\Program Files\Internet Explorer\IEXPLORE.EXE N/A
Key created \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch C:\Program Files\Internet Explorer\IEXPLORE.EXE N/A
Set value (str) \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" C:\Program Files\Internet Explorer\IEXPLORE.EXE N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" C:\Program Files\Internet Explorer\IEXPLORE.EXE N/A
Key created \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Main C:\Program Files\Internet Explorer\IEXPLORE.EXE N/A
Key created \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage C:\Program Files\Internet Explorer\IEXPLORE.EXE N/A
Key created \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain C:\Program Files\Internet Explorer\IEXPLORE.EXE N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" C:\Program Files\Internet Explorer\IEXPLORE.EXE N/A
Set value (data) \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000bb7c5835718279428690b074aa627b70000000000200000000001066000000010000200000004807c5e4584feceb317a5f622d322b761673c35d3b47aa352f9118870d45077e000000000e8000000002000020000000129e8e99f8597351fdb3f9ec175ce6d37fca7aaa4b56157d515d60ef7b5d04e290000000274955a5f2941eee676ba8a9cf2b9a876a5eeaee6b707ef563b9b56fd9014874a9a5df9e0691f69f3ab6b7e800e7eb69b372bd98dd1e6da8e51456d3f169b4e1bed57c4c5a61c5ccd82af097dfcd63489d265cb4e36745e5a9e53359df7c042dadf348722e39f81595c497332afd825cdf396dde6b3a2c5e1d108495f4679e54b5e96c5b434de08eb5be3bc97fb2b9a340000000e59e5c3b8e7f04b7dcf4c65eb1d15bbbfb84122bd9ee40cc0b88f5a75d38d18142266bb1047efaf1625bfd58568f8345a3ea46df611524330936fede31f989e9 C:\Program Files\Internet Explorer\IEXPLORE.EXE N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "429833065" C:\Program Files\Internet Explorer\IEXPLORE.EXE N/A
Set value (data) \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000bb7c5835718279428690b074aa627b7000000000020000000000106600000001000020000000174a34afb4f4e0f1e08e6f0991f865566e0ab697c2f8a9a988267c149064c7d2000000000e8000000002000020000000c5a66ce5e93b42d4403e34dd327bdfe465c85ac89bd5ceacaffdb72b41dd99c320000000e1100f7d3b2015628bfd182192bfde4e8688d4ccfa2c4c01c442ce0391e43c3f40000000e93e13de94cd2291f70bf4cf2e1c5bfa3ea3f29bbec084d82376efa496eb1419118bbe6d9bfc8908feb21f5de058f2b13e1b9b77deadff61ee72a28e55537656 C:\Program Files\Internet Explorer\IEXPLORE.EXE N/A
Key created \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\IntelliForms C:\Program Files\Internet Explorer\IEXPLORE.EXE N/A
Key created \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\InternetRegistry C:\Program Files\Internet Explorer\IEXPLORE.EXE N/A
Key created \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\PageSetup C:\Program Files\Internet Explorer\IEXPLORE.EXE N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" C:\Program Files\Internet Explorer\IEXPLORE.EXE N/A
Key created \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Set value (int) \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" C:\Program Files\Internet Explorer\IEXPLORE.EXE N/A
Key created \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\LowRegistry C:\Program Files\Internet Explorer\IEXPLORE.EXE N/A
Key created \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive C:\Program Files\Internet Explorer\IEXPLORE.EXE N/A
Set value (str) \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Key created \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\SearchScopes C:\Program Files\Internet Explorer\IEXPLORE.EXE N/A
Set value (data) \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 40d0eca591eeda01 C:\Program Files\Internet Explorer\IEXPLORE.EXE N/A
Key created \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\DomainSuggestion C:\Program Files\Internet Explorer\IEXPLORE.EXE N/A
Key created \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Toolbar C:\Program Files\Internet Explorer\IEXPLORE.EXE N/A
Key created \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Zoom C:\Program Files\Internet Explorer\IEXPLORE.EXE N/A
Key created \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Main C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE N/A
Key created \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery C:\Program Files\Internet Explorer\IEXPLORE.EXE N/A
Key created \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage C:\Program Files\Internet Explorer\IEXPLORE.EXE N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files\Internet Explorer\IEXPLORE.EXE N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 1952 wrote to memory of 2284 N/A C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLED.EXE C:\Program Files (x86)\Internet Explorer\iexplore.exe
PID 1952 wrote to memory of 2284 N/A C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLED.EXE C:\Program Files (x86)\Internet Explorer\iexplore.exe
PID 1952 wrote to memory of 2284 N/A C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLED.EXE C:\Program Files (x86)\Internet Explorer\iexplore.exe
PID 1952 wrote to memory of 2284 N/A C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLED.EXE C:\Program Files (x86)\Internet Explorer\iexplore.exe
PID 2284 wrote to memory of 2452 N/A C:\Program Files (x86)\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\IEXPLORE.EXE
PID 2284 wrote to memory of 2452 N/A C:\Program Files (x86)\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\IEXPLORE.EXE
PID 2284 wrote to memory of 2452 N/A C:\Program Files (x86)\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\IEXPLORE.EXE
PID 2284 wrote to memory of 2452 N/A C:\Program Files (x86)\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\IEXPLORE.EXE
PID 2452 wrote to memory of 2292 N/A C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
PID 2452 wrote to memory of 2292 N/A C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
PID 2452 wrote to memory of 2292 N/A C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
PID 2452 wrote to memory of 2292 N/A C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE

Processes

C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLED.EXE

"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\BlitzedV12\BlitzedGrabberV12.exe.xml"

C:\Program Files (x86)\Internet Explorer\iexplore.exe

"C:\Program Files (x86)\Internet Explorer\iexplore.exe" -nohome

C:\Program Files\Internet Explorer\IEXPLORE.EXE

"C:\Program Files\Internet Explorer\IEXPLORE.EXE" -nohome

C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE

"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2452 CREDAT:275457 /prefetch:2

Network

Country Destination Domain Proto
US 204.79.197.200:443 ieonline.microsoft.com tcp
US 204.79.197.200:443 ieonline.microsoft.com tcp
US 204.79.197.200:443 ieonline.microsoft.com tcp

Files

C:\Users\Admin\AppData\Local\Temp\Cab6DD3.tmp

MD5 49aebf8cbd62d92ac215b2923fb1b9f5
SHA1 1723be06719828dda65ad804298d0431f6aff976
SHA256 b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512 bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

C:\Users\Admin\AppData\Local\Temp\Tar6E91.tmp

MD5 4ea6026cf93ec6338144661bf1202cd1
SHA1 a1dec9044f750ad887935a01430bf49322fbdcb7
SHA256 8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA512 6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 ce827ae8a42f4c2d77a840bc9b774a76
SHA1 8a233949876527fd83114def2f3c1b4108f0b5a4
SHA256 46d1c4caec404fa8f918b99d0f6f5a2a05397970baf190444af9d25d702cb855
SHA512 4a51e91cd7016587da715fd22f110db7427a882d10ab5284a1a78e19aedbc6e9d6e74faea97f452f00080653f6a3846b632cdc6f76babb7bac7867c58e5c068a

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 eeb816ce87607680828789884513e429
SHA1 89ac1d62a1936df29e843c63432587b140b6b895
SHA256 2c74a8d2bfe81476e24176c57e3bb2dc77bb258409c70ed02dd87c940e63e174
SHA512 7294e67542a8c24ad2fa34d8fd5fec1468888f3cf7baff83d5bb742f03a6f72fc6118f88cd8ff9d88c559ed59bcf16334e6dd259c046ba18312acb0e31f49e08

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 f793778892e44d77cfb37fb997a54bc2
SHA1 75508adcd83cf9f7351a278e2c325472199bf8e7
SHA256 0d56732fa81f07c3d7a110326ad1fb5f2e4df74d27892ba443b69601f7f9bee1
SHA512 8ba4ebd1cc186f66ff59861e413c90dc6ba3382f1d5ef3ee4eb3dfff32c904b730c76df16febb936fc25fed30006984b3f00565b496f467fe665e520bbce2e8a

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 eb59d9d7bd008e6858abf45fba6151a5
SHA1 99249bb97bfed304c63d7acdc87b7216a48f982b
SHA256 3d008a0fa1ab0c8865f242458e61a61f865d40f726c50ffa757ad44529a52251
SHA512 b282d79ea14385414dc33ce76fedb54286d964082fdd7359b0ded368db5c06817d06b64ad63514e52573b42ca615bb887538caf14b628acb99552689e86e34dc

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 c9ec3e6683f1a97179c9c50a001fa583
SHA1 af80878e8f6f351ae8f3f7246ec8e63e51ac8d39
SHA256 45cccfc6d339c00c9acc1d75d444f5d73835e72ca1c4f6aba8d7e34594f24213
SHA512 731b35123ebfb852c5d41033c9b178e52be845214343cb0e7341b54aab3607fed71e08e1a9a92a827900384d68e61db836653b0a16f0a6c11e42ebd5f033c336

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 d7900e8bed6ef2d0d8137534e01a528e
SHA1 0540f62003c0dd0df4addb443279805413ea6b36
SHA256 5dc50cbc8eb54314b4412079c6975e5fc1a555fa60de0ffcfee462d497859dc8
SHA512 92cdc51f41e82d49ff4b1e161c7296cc48706680cba6a458de362cf2f3e56e08caaf1c1cecd888d15eb298ea48964f2ee9939e17a910c021ab510b0af24483aa

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 37eb359ebf0f08af453c05137cc0e898
SHA1 0dde2b6e7241f32520b7f97277b1e6981d1deca1
SHA256 00409e482f8a40c954ce06b49b1d28ad470cdef75bd2691513317514514b621d
SHA512 fc3ed14b65e5feae93d7ddce5a7bdabcfe1210d8ac4db7fb16bcd228e19272ef0fb0954a64e5faa659917d5396004643d0485ed69573e47544860f6902a3c05d

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 1e1ac64d8425e5e0a99f8d3461b1af39
SHA1 01751c3e96d201f83e2f3d81e46b1e782e121201
SHA256 dbd5710f5ed4d4c4f156ae0908b085376757a95a5533c1fa50818fccacf2f2a1
SHA512 2e5a64e0c2ed875f90ad12160c5ba452ca315af26faa34eeb569b3d05a36fc24186200b48a0cb067c67f35ade9fdd9d3d2f3eadfc3602968152f3cb5d204c796

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 68843d2eff9a6ae752700d5e941f7101
SHA1 35482f809cccabcef9d1f577425065d0996327b4
SHA256 9e73bc5bd6ecc48b0d02df8df7b16fee5d258935b1a6804a4cf80477cb351551
SHA512 fda5446e6673f39710dc16b49b902d0678017249ed6f3310a1b27624878607c05ecfb49f69b714f70c06f5c2622b5c6c98ecd9a8ad281e421f7c3932faa26533

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 106059225b46365717ae66bc06bfc83d
SHA1 e29515f9371b17d15b83045cad65b7d2192ea9c2
SHA256 4a59ab2d74e7491e301056baee7d9f43aa1b561b20bd32bcd72f30ecf1806704
SHA512 4fcf628f9213cfc09ea6df46732be0868c5f02b6fd546bd837917a0972144f37e06dc9cee672218b836c3d71badf0a79acf755ca96a34310bd660035d5c23a60

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 873704b8b058be1916238bcc41f56f99
SHA1 2a2333dc4c0f075a0f35eed689df00e85c6b03a6
SHA256 a13b4efd05b71b10431c947954a41168540815085d8eba8744b35b7f826a1065
SHA512 8394ad7b40cd8874ac16c18a6dfd3f203700777ea79897a43ff2e84bf42e3d5cd6088a4dcf52d3b5aeb6b0de6f74195fa56c98618cf24a2edc6f01df1b2a6320

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 b3bb44db342a6608bc93926d13d751b7
SHA1 ec7d805c42eef55297edf50f73139261fff65ca2
SHA256 3234d0678cdfaaf9044d21d6f127a23f13d872a075b79842007f40244f73f19c
SHA512 c8e243ec5f587287eabd5487c90c58cd26de7953ddc6324cbc3c1560dc21273c5a6cf95a6e46b435163a3420bf13f210c945d7f4f094a097f0c9bc2c1098bf57

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 618cfc8594c00097a861334b714a3aa9
SHA1 52e1b76c41af9e3cd35414c61993a12b29d3c791
SHA256 998f56d21db16af84b34d3fd4dc40d32336fa6f4146da6385115a778cfc6d0a7
SHA512 ba8343af06e4115361433f33e949a545ddc662e68367296185e61bbc375888d25fc12fe495395625a2bda23fa0d108742f7c7a14d6d5c88ad3946f67e7abbbc1

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 22987e4d19ed208781df349bf5a0fe5e
SHA1 3962dd9212db475213781ec0771af6ccc41aadd5
SHA256 596410e356459159ef70e0d43c287f3631efb8867f8a5d5a5ba92652841d1837
SHA512 0dfc6dcffd151513710c3ddeb86c266c5a0bd2ac8338f451bcfd629164459750799d4bca316b255d7b8d908c3d02290995f482e54eac56a01ef9238ba0652015

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 e2680b4f06b3b80a4a022e0fd10edada
SHA1 73181048ed8ca8b2296b1fd41e04524c3777b19d
SHA256 8a5c3090dbb20b78733f6f23c472de3d2439d3c9320f96017cbb60559db7bfc3
SHA512 d28c92334b76b4e62481433e506574fac6b22629aeeafcf61f671cdf8072814b6fea819d98cdf470d2ea1b2e5c476b87412b6ce32e4acfb7d0e7e778afc786bb

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 d4bf2ebcdfeb67e0eec52b45edaebb9e
SHA1 f5db9bc03e9ad12d43c8d814d9a065ac256c267c
SHA256 2465aaed30c4f838b7739e56c0f7392e09bbcaba0e7cb8a2fe04b18a0db6a432
SHA512 2eed7def2bdd8925d7c9941d24f7a7fc019c2d819101cf31eadb59fc47e88a9aa1f1f94214a37a258e2ded84481f49bc6f1094d80370be1956ace1a4469fc02a

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 ae1d8e88cfe4e0d239c99643a921e85a
SHA1 23ce222699e7efcf7037d73c4ddfbd84ea0399a5
SHA256 9cb6ccae51fbfc0c77f4e9f6a623af2550869c3e4956def60e25dcefb1e85513
SHA512 069deb38d62a928568ed47befa031dddce02135f7523650c2c4f336a70049b77fa45362ebb5de9f74d5bba6ded92242d965f0ab6a9c55466e8b9bf93affaeb8b

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 6ba0847bd4945f975c0f4d81477bc9b7
SHA1 b101524e166ec8be2959eca0e9f9cc2cbaf9d9b2
SHA256 8cb225fea87aa9b084f6fe6be81ea882b5690ff14f9c3e9225a418c0d1f10f4f
SHA512 7e8db652966d9443bee3e01e9b0da020c282226ecaf2456842fc8d3d776dbaa2d713dc40ef6ab9b9a5614e31ffb75db0298964ae9975df8f9e2968ce2de709f7

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

MD5 e6faa356836034bd8738fdca464ecafa
SHA1 c191276dee903c802ae8d6103f95681c31380f21
SHA256 545d83ee62cc967b0d94d9974919390e6824901c480b2df08ed86860f8e3ae61
SHA512 ecbc888b1a44f6cdb01c1abd26d927285f0d0223e6db582e6aa10a696af7e0e75ad271eee9ae8dcf7a11eae1fdc8a88e1c8f76a1ef2f9c94c1e2059823c7205d

Analysis: behavioral4

Detonation Overview

Submitted

2024-08-14 21:32

Reported

2024-08-14 21:35

Platform

win10v2004-20240802-en

Max time kernel

136s

Max time network

157s

Command Line

"C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\BlitzedV12\BlitzedGrabberV12.exe.xml"

Signatures

N/A

Processes

C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE

"C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\BlitzedV12\BlitzedGrabberV12.exe.xml"

Network

Country Destination Domain Proto
US 8.8.8.8:53 97.17.167.52.in-addr.arpa udp
US 8.8.8.8:53 138.32.126.40.in-addr.arpa udp
US 8.8.8.8:53 13.86.106.20.in-addr.arpa udp
US 8.8.8.8:53 26.35.223.20.in-addr.arpa udp
US 8.8.8.8:53 103.169.127.40.in-addr.arpa udp
US 8.8.8.8:53 206.23.85.13.in-addr.arpa udp
US 8.8.8.8:53 21.58.20.217.in-addr.arpa udp
US 8.8.8.8:53 23.236.111.52.in-addr.arpa udp
US 8.8.8.8:53 tse1.mm.bing.net udp
US 150.171.27.10:443 tse1.mm.bing.net tcp
US 150.171.27.10:443 tse1.mm.bing.net tcp
US 150.171.27.10:443 tse1.mm.bing.net tcp
US 150.171.27.10:443 tse1.mm.bing.net tcp
US 150.171.27.10:443 tse1.mm.bing.net tcp

Files

memory/3880-0-0x00007FFE35090000-0x00007FFE350A0000-memory.dmp

memory/3880-1-0x00007FFE750AD000-0x00007FFE750AE000-memory.dmp

memory/3880-2-0x00007FFE75010000-0x00007FFE75205000-memory.dmp

memory/3880-3-0x00007FFE75010000-0x00007FFE75205000-memory.dmp

Analysis: behavioral5

Detonation Overview

Submitted

2024-08-14 21:32

Reported

2024-08-14 21:35

Platform

win7-20240704-en

Max time kernel

119s

Max time network

121s

Command Line

rundll32.exe C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\APIFOR.dll,#1

Signatures

N/A

Processes

C:\Windows\system32\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\APIFOR.dll,#1

Network

N/A

Files

N/A

Analysis: behavioral6

Detonation Overview

Submitted

2024-08-14 21:32

Reported

2024-08-14 21:35

Platform

win10v2004-20240802-en

Max time kernel

139s

Max time network

153s

Command Line

rundll32.exe C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\APIFOR.dll,#1

Signatures

N/A

Processes

C:\Windows\system32\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\APIFOR.dll,#1

Network

Country Destination Domain Proto
US 8.8.8.8:53 g.bing.com udp
US 13.107.21.237:443 g.bing.com tcp
US 8.8.8.8:53 28.118.140.52.in-addr.arpa udp
US 8.8.8.8:53 240.143.123.92.in-addr.arpa udp
US 8.8.8.8:53 95.221.229.192.in-addr.arpa udp
US 8.8.8.8:53 71.159.190.20.in-addr.arpa udp
US 8.8.8.8:53 237.21.107.13.in-addr.arpa udp
US 8.8.8.8:53 26.35.223.20.in-addr.arpa udp
US 8.8.8.8:53 149.220.183.52.in-addr.arpa udp
US 8.8.8.8:53 103.169.127.40.in-addr.arpa udp
US 8.8.8.8:53 206.23.85.13.in-addr.arpa udp
US 8.8.8.8:53 147.142.123.92.in-addr.arpa udp
US 8.8.8.8:53 205.47.74.20.in-addr.arpa udp
US 8.8.8.8:53 tse1.mm.bing.net udp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp

Files

N/A

Analysis: behavioral7

Detonation Overview

Submitted

2024-08-14 21:32

Reported

2024-08-14 21:35

Platform

win7-20240708-en

Max time kernel

118s

Max time network

120s

Command Line

rundll32.exe C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Anarchy.dll,#1

Signatures

N/A

Processes

C:\Windows\system32\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Anarchy.dll,#1

Network

N/A

Files

N/A

Analysis: behavioral9

Detonation Overview

Submitted

2024-08-14 21:32

Reported

2024-08-14 21:35

Platform

win7-20240729-en

Max time kernel

68s

Max time network

125s

Command Line

"C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe"

Signatures

StormKitty

stealer stormkitty

StormKitty payload

Description Indicator Process Target
N/A N/A N/A N/A

Credentials from Password Stores: Credentials from Web Browsers

credential_access stealer

Disables Task Manager via registry modification

evasion

Reads user/profile data of web browsers

spyware stealer

Adds Run key to start application

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-2257386474-3982792636-3902186748-1000\Software\Microsoft\Windows\CurrentVersion\Run\EFyJd = "C:\\Users\\Admin\\AppData\\Local\\Temp\\BlitzedV12\\Resources\\Blitzed.exe" C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe N/A

Legitimate hosting services abused for malware hosting/C2

Description Indicator Process Target
N/A discord.com N/A N/A
N/A discord.com N/A N/A
N/A discord.com N/A N/A
N/A discord.com N/A N/A
N/A discord.com N/A N/A

Looks up external IP address via web service

Description Indicator Process Target
N/A checkip.dyndns.org N/A N/A

Browser Information Discovery

discovery

Enumerates physical storage devices

Event Triggered Execution: Netsh Helper DLL

persistence privilege_escalation
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key opened \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A
Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh C:\Windows\system32\netsh.exe N/A

System Network Configuration Discovery: Wi-Fi Discovery

discovery
Description Indicator Process Target
N/A N/A C:\Windows\system32\cmd.exe N/A
N/A N/A C:\Windows\system32\netsh.exe N/A
N/A N/A C:\Windows\system32\cmd.exe N/A
N/A N/A C:\Windows\system32\netsh.exe N/A

Modifies system certificate store

evasion spyware trojan
Description Indicator Process Target
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D4DE20D05E66FC53FE1A50882C78DB2852CAE474\Blob = 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 C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D4DE20D05E66FC53FE1A50882C78DB2852CAE474\Blob = 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 C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D4DE20D05E66FC53FE1A50882C78DB2852CAE474 C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D4DE20D05E66FC53FE1A50882C78DB2852CAE474\Blob = 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 C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe N/A

Suspicious behavior: GetForegroundWindowSpam

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 580 wrote to memory of 2908 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\system32\cmd.exe
PID 580 wrote to memory of 2908 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\system32\cmd.exe
PID 580 wrote to memory of 2908 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\system32\cmd.exe
PID 2908 wrote to memory of 3052 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\chcp.com
PID 2908 wrote to memory of 3052 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\chcp.com
PID 2908 wrote to memory of 3052 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\chcp.com
PID 2908 wrote to memory of 1436 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\netsh.exe
PID 2908 wrote to memory of 1436 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\netsh.exe
PID 2908 wrote to memory of 1436 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\netsh.exe
PID 2908 wrote to memory of 2684 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\findstr.exe
PID 2908 wrote to memory of 2684 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\findstr.exe
PID 2908 wrote to memory of 2684 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\findstr.exe
PID 580 wrote to memory of 2524 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\system32\cmd.exe
PID 580 wrote to memory of 2524 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\system32\cmd.exe
PID 580 wrote to memory of 2524 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\system32\cmd.exe
PID 2524 wrote to memory of 2552 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\chcp.com
PID 2524 wrote to memory of 2552 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\chcp.com
PID 2524 wrote to memory of 2552 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\chcp.com
PID 2524 wrote to memory of 2572 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\netsh.exe
PID 2524 wrote to memory of 2572 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\netsh.exe
PID 2524 wrote to memory of 2572 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\netsh.exe
PID 2524 wrote to memory of 2592 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\findstr.exe
PID 2524 wrote to memory of 2592 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\findstr.exe
PID 2524 wrote to memory of 2592 N/A C:\Windows\system32\cmd.exe C:\Windows\system32\findstr.exe
PID 580 wrote to memory of 1748 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\cmd.exe
PID 580 wrote to memory of 1748 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\cmd.exe
PID 580 wrote to memory of 1748 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\cmd.exe
PID 580 wrote to memory of 760 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\cmd.exe
PID 580 wrote to memory of 760 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\cmd.exe
PID 580 wrote to memory of 760 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\cmd.exe
PID 580 wrote to memory of 356 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\cmd.exe
PID 580 wrote to memory of 356 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\cmd.exe
PID 580 wrote to memory of 356 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\cmd.exe
PID 580 wrote to memory of 584 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\cmd.exe
PID 580 wrote to memory of 584 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\cmd.exe
PID 580 wrote to memory of 584 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\cmd.exe
PID 580 wrote to memory of 2452 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\cmd.exe
PID 580 wrote to memory of 2452 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\cmd.exe
PID 580 wrote to memory of 2452 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\cmd.exe
PID 580 wrote to memory of 984 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\cmd.exe
PID 580 wrote to memory of 984 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\cmd.exe
PID 580 wrote to memory of 984 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\cmd.exe
PID 580 wrote to memory of 1724 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\cmd.exe
PID 580 wrote to memory of 1724 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\cmd.exe
PID 580 wrote to memory of 1724 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\cmd.exe
PID 580 wrote to memory of 1528 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\cmd.exe
PID 580 wrote to memory of 1528 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\cmd.exe
PID 580 wrote to memory of 1528 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\cmd.exe
PID 580 wrote to memory of 1472 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\cmd.exe
PID 580 wrote to memory of 1472 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\cmd.exe
PID 580 wrote to memory of 1472 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\cmd.exe
PID 580 wrote to memory of 2728 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\cmd.exe
PID 580 wrote to memory of 2728 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\cmd.exe
PID 580 wrote to memory of 2728 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\cmd.exe
PID 580 wrote to memory of 2832 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\cmd.exe
PID 580 wrote to memory of 2832 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\cmd.exe
PID 580 wrote to memory of 2832 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\cmd.exe
PID 580 wrote to memory of 1960 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\cmd.exe
PID 580 wrote to memory of 1960 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\cmd.exe
PID 580 wrote to memory of 1960 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\cmd.exe
PID 580 wrote to memory of 2116 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\cmd.exe
PID 580 wrote to memory of 2116 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\cmd.exe
PID 580 wrote to memory of 2116 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\cmd.exe
PID 580 wrote to memory of 1132 N/A C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe C:\Windows\System32\cmd.exe

Processes

C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe

"C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Blitzed.exe"

C:\Windows\system32\cmd.exe

"cmd.exe" /C chcp 65001 && netsh wlan show profile | findstr All

C:\Windows\system32\chcp.com

chcp 65001

C:\Windows\system32\netsh.exe

netsh wlan show profile

C:\Windows\system32\findstr.exe

findstr All

C:\Windows\system32\cmd.exe

"cmd.exe" /C chcp 65001 && netsh wlan show profile name=65001 key=clear | findstr Key

C:\Windows\system32\chcp.com

chcp 65001

C:\Windows\system32\netsh.exe

netsh wlan show profile name=65001 key=clear

C:\Windows\system32\findstr.exe

findstr Key

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "63935142-188721675018396177442005937145-8337802132074394173-278335376-581559510"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "-21101262681228916554-1549011171-1634369288-147635976610066249401957806289563434151"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "220948474-12773212731063404277-1091699545-5052832266579632341495475607-545812774"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "-391405138-389509062-2056671285-20683557981799940592-28466316-807673290-1572761909"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "-263878204-517960769-973606663-188419364420070907221637056417-2058436996182438850"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "912730716184596431213866435121484432619-1309380266-587767636-18784978751553105794"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "184632464418299494141636836034-1688410349-2099892891-16437734361284248331197047708"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "1269026256-1018088266770613599846351108-210532909810700612201993414794-2063793664"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "186628348-121977708720151128731297226861-2032779668-1796134282-993206225816093343"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "-1247982441-2108147580-1624721370637652118-1867257297-145929831218026368031924944760"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "11601350541379820960-201487492318079165921345333060-12149185-1592750026-789671353"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "1154942892-1653634720201217429-1851167727-19449010721535788216-1786153562-834661844"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "-1420203569-48562501350444449314825240151406046832-2107830329-1908179973727233454"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "-404567932071529415-282572205-10532821961102646498-1456604512-2144494392-1422687116"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "14262552331975596385-1435033303642714169-12208162311878913254-7799654952090156629"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "-1494964443-2128510666-1837736634-208819134-53421964-1871793572-1152443553-1701291903"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "1596728470-20298210891370581141182629041-201083370577768722-277064206-1067857984"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "19585647511667803042-680125141728166901738676974-267113561485054047841226672"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "-1471492287-17536219512850330173270670851127317615-1385811520-2714745671265028031"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "86566113116846121732089941757845442963-1634425168-72880887919597923951578926808"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "-15854267856938329324512955092012978158-1299405660-237506962-1872847824474562828"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "435541304894129748-1370752505-16955821251660361702683797524-959552452854663769"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "-1480640217-689488253136748521-61590955-141389564748210141320385600792093880254"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "119125815428738072520937540171320690530159206500969768471-15607741391566027324"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "-56665035135436662118540483431102964319-11480027471087450953-14898675471655943836"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "1855641148-788750423-1814765096230035201412189476102593852112631258881183535409"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "-2132421804-18003395667930981331784401708478191057-385727865-1622206509172983732"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "10345732831558737142-1075897827-17918013521952831084-15793248032076210029-922420461"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "-116689904021036016821851209352102833159-877711897-11343752561617151645-40168088"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "-17717479-2086596668015007089623256871171374018-489746328-1057005141804246900"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "-453602927-97625200253953836-7276723411799145211-335274612-273204548-309380893"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "-3014168611930310983-20373721751989879681-726428890-1228386372-21431933971504891659"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "-5927361671812699670-133804272-79259796-14915895545688878583696012691460423531"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "2049780607443191153-19938146071772597345103597546820145714001618641560-250462690"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "-2056622332-142606185210418823-1512183327557680185-966157427-12681683122142585830"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "-670949500-45424207613810502411190695814-9864119631175504346-1592944912-1161912177"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "-2103223616-2347974994626924771887575781141372651515377676011554071448-1394869539"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "19642592292032962846-1945921487337030411693180178-1741439700-435451637204992031"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "8199573881342195898126376397-1124048111-1874699171-1311351025221962295217403342"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "2029754623-21134490451782942021846423857-137457096-20190539481041136366-115719742"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "-1016632039-12107299533578033811174728516-150047371611141546562032717552-1769317658"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "216275748926653868-2128636838-1385031345-1961816476771848339980587207-575154568"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "-1587998694-125875889-1668208914-583768407-306596813-888827270185925158-1276504183"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "877038489-141160841-1798678854957505142-804873852-205586058310226770921891088198"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "560389742-813491278820580257-1905457693134623013-1467759242-68276888-419696150"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "-872559118-1884192637-237580269-41277185053628947820481634887702384041978802166"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "1837392045-30619087-2980720071174544018112139321138836626517328435031096472043"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "155195814411732552861308390500585883349-584730907-1920889524526627953799440790"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "-1018394631100354440-1564184621-431545953-1337399035633749705509122076-1464837960"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "7346761413150382671296194721-1917254161572644728177950907717491318451240073547"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "39964249-310264347-1142761348124126078-433325999134318074972470399-2139216775"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "894911366-49319681419143706941647038515-1790148031195873641-4903618601366660753"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "1834035104-86340097-14035408161259388671-385425339-47510806618478390401097885961"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "112202864-2119443030-1327842267-9036372621329218390-1547229772-9164295961786122812"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "-66269195920445378204701421836854950266802360951411153527-426795143-642227026"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "457593208-2008685451-163804319150507174920059778371614488837-720904473-555529482"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "-25515912-77319018790627171419325611421468236392500344658-48860066368002119"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "978751230-3746779662036503132-15523272661398533126613354447857372091985427923"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "-189166171817385449651368732204-1268847893363066351-1979720978-1697794094-775866489"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "-10488113081597709474272344586875504205-1370296698-544423725-13967062971108459759"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "1694590804-891580020-351285429-628199587-1584515398-1883258782967606561504959736"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "1906852469-148812108311088257-1956801488-5952709271310492401204385072-1805630141"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "-682832297-190767216920114138318992608481077740117295939774-1829280731-1922810401"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "-1308485351-817246985969458468-368335423640403938385327326612527605388219062"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "440293710544740863-173180551819343319931870929547602140231497837001693779149"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "1006089897-318702221-4874899481574553783387834017106441347720456943311960129815"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "1797051624-20639591771004664614695119613-1833817286213782411770389882222768979"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "896416500-883926127509844091-595898336-3586101431810020594-328417293-2090476114"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "-18997281741761437304-2040962075-354120213-1374751694-1978424052-1333779743-739353020"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "-1448402159-1370709683488265516-1810594908-11229475821072534141496912056-1926439311"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "12620025392064208616-127614817912695120151674904016-549686233-2619643551869333056"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "-12643256821663853083277012112770473991267366154-14731932571648309934-1024145606"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "-526870005616218624-5482562312012034920957777516-171474612820396264021258242407"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "-759744150-457963686-626551519-579966210-986533555-457013739-589850119-1768639523"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "460989418-355205928-1124838941-1578704239-812429006-9468847861533439777-2053068624"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "2142764001204863620-1611817070-461975005-862435280149042960491052212556746956"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "1349869349-505546012-1674753924-2168282301884980037-388017659-1586510388-386762440"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "133680487489444208-480971174-3865341441396732919682041920668872531-619025378"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "-1893160410640207697891074800-19477010599541672201518055044-759175758-211669778"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "604494605-6778851101015661432-1385764879-1267383351348352236-144244033611029486"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "1121562912-433401321142244792-5114989071499717212-16093686931539302680-2057208743"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "-1120500000-18574679182125260493-17965299741801718036128738891-583402171660972831"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "-3175834821368549232-77080568070777580457627327013018605321993090641418631875"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "602164142-387519640-1571843179-903013239153247161090651218-8540400601712902145"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

C:\Windows\system32\conhost.exe

\??\C:\Windows\system32\conhost.exe "-1583957688-19358862271882136176167512708754491174674804688721304580171808094385"

C:\Windows\System32\cmd.exe

"C:\Windows\System32\cmd.exe" /C echo stonedeagle on top faggots

Network

Country Destination Domain Proto
US 8.8.8.8:53 checkip.dyndns.org udp
BR 132.226.247.73:80 checkip.dyndns.org tcp
US 8.8.8.8:53 api.anonfiles.com udp
US 8.8.8.8:53 discord.com udp
US 162.159.128.233:443 discord.com tcp
US 162.159.128.233:443 discord.com tcp
US 162.159.128.233:443 discord.com tcp
US 162.159.128.233:443 discord.com tcp

Files

memory/580-0-0x000007FEF5AC3000-0x000007FEF5AC4000-memory.dmp

memory/580-1-0x00000000000E0000-0x00000000000F6000-memory.dmp

memory/580-2-0x0000000000590000-0x000000000059A000-memory.dmp

memory/580-3-0x0000000001EA0000-0x0000000001EBA000-memory.dmp

memory/580-4-0x000007FEF5AC0000-0x000007FEF64AC000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\CabF450.tmp

MD5 49aebf8cbd62d92ac215b2923fb1b9f5
SHA1 1723be06719828dda65ad804298d0431f6aff976
SHA256 b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512 bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

C:\Users\Admin\AppData\Local\Temp\TarF481.tmp

MD5 4ea6026cf93ec6338144661bf1202cd1
SHA1 a1dec9044f750ad887935a01430bf49322fbdcb7
SHA256 8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA512 6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

C:\Users\Admin\AppData\Local\Temp\passwords.txt

MD5 68b329da9893e34099c7d8ad5cb9c940
SHA1 adc83b19e793491b1c6ea0fd8b46cd9f32e592fc
SHA256 01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b
SHA512 be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09

memory/580-60-0x000007FEF5AC3000-0x000007FEF5AC4000-memory.dmp

memory/580-61-0x000007FEF5AC0000-0x000007FEF64AC000-memory.dmp

Analysis: behavioral14

Detonation Overview

Submitted

2024-08-14 21:32

Reported

2024-08-14 21:35

Platform

win10v2004-20240802-en

Max time kernel

148s

Max time network

151s

Command Line

rundll32.exe C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Newtonsoft.Json.dll,#1

Signatures

N/A

Processes

C:\Windows\system32\rundll32.exe

rundll32.exe C:\Users\Admin\AppData\Local\Temp\BlitzedV12\Resources\Newtonsoft.Json.dll,#1

Network

Country Destination Domain Proto
US 8.8.8.8:53 g.bing.com udp
US 204.79.197.237:443 g.bing.com tcp
US 8.8.8.8:53 149.220.183.52.in-addr.arpa udp
US 8.8.8.8:53 0.159.190.20.in-addr.arpa udp
US 8.8.8.8:53 25.140.123.92.in-addr.arpa udp
US 8.8.8.8:53 237.197.79.204.in-addr.arpa udp
US 8.8.8.8:53 217.106.137.52.in-addr.arpa udp
US 8.8.8.8:53 26.165.165.52.in-addr.arpa udp
US 8.8.8.8:53 206.23.85.13.in-addr.arpa udp
US 8.8.8.8:53 21.58.20.217.in-addr.arpa udp
US 8.8.8.8:53 205.47.74.20.in-addr.arpa udp
US 8.8.8.8:53 30.243.111.52.in-addr.arpa udp
US 8.8.8.8:53 26.35.223.20.in-addr.arpa udp
US 8.8.8.8:53 tse1.mm.bing.net udp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp

Files

N/A