Malware Analysis Report

2025-08-05 16:49

Sample ID 240816-vdnmaswaqe
Target https://google.com
Tags
discovery
score
3/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
3/10

Threat Level: Likely benign

The file https://google.com was found to be: Likely benign.

Malicious Activity Summary

discovery

System Network Configuration Discovery: Internet Connection Discovery

Suspicious use of SendNotifyMessage

Suspicious use of SetWindowsHookEx

Suspicious use of WriteProcessMemory

Checks processor information in registry

Modifies registry class

Opens file in notepad (likely ransom note)

Runs ping.exe

Uses Task Scheduler COM API

Suspicious use of AdjustPrivilegeToken

Suspicious use of FindShellTrayWindow

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-08-16 16:52

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-08-16 16:52

Reported

2024-08-16 16:57

Platform

win10-20240404-en

Max time kernel

162s

Max time network

261s

Command Line

"C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "https://google.com"

Signatures

System Network Configuration Discovery: Internet Connection Discovery

discovery
Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\system32\PING.EXE N/A

Checks processor information in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier C:\Program Files\Mozilla Firefox\firefox.exe N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-4106386276-4127174233-3637007343-1000_Classes\Local Settings C:\Program Files\Mozilla Firefox\firefox.exe N/A

Opens file in notepad (likely ransom note)

ransomware
Description Indicator Process Target
N/A N/A C:\Windows\System32\NOTEPAD.EXE N/A

Runs ping.exe

Description Indicator Process Target
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\system32\PING.EXE N/A
N/A N/A N/A N/A
N/A N/A C:\Windows\system32\PING.EXE N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A

Suspicious use of SetWindowsHookEx

Description Indicator Process Target
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 3444 wrote to memory of 4612 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3444 wrote to memory of 4612 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3444 wrote to memory of 4612 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3444 wrote to memory of 4612 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3444 wrote to memory of 4612 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3444 wrote to memory of 4612 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3444 wrote to memory of 4612 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3444 wrote to memory of 4612 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3444 wrote to memory of 4612 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3444 wrote to memory of 4612 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 3444 wrote to memory of 4612 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4612 wrote to memory of 4564 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4612 wrote to memory of 4564 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4612 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4612 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4612 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4612 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4612 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4612 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4612 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4612 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4612 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4612 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4612 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4612 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4612 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4612 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4612 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4612 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4612 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4612 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4612 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4612 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4612 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4612 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4612 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4612 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4612 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4612 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4612 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4612 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4612 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4612 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4612 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4612 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4612 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4612 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4612 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4612 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4612 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4612 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4612 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4612 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4612 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4612 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4612 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4612 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4612 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4612 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4612 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4612 wrote to memory of 4960 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4612 wrote to memory of 5032 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4612 wrote to memory of 5032 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4612 wrote to memory of 5032 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe

Uses Task Scheduler COM API

persistence

Processes

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "https://google.com"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url https://google.com

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4612.0.894058985\1752081585" -parentBuildID 20221007134813 -prefsHandle 1692 -prefMapHandle 1684 -prefsLen 20747 -prefMapSize 233444 -appDir "C:\Program Files\Mozilla Firefox\browser" - {f75914ec-0e83-40d8-9dac-97c45a959b92} 4612 "\\.\pipe\gecko-crash-server-pipe.4612" 1772 1fbca0ef858 gpu

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4612.1.1015039063\1884960910" -parentBuildID 20221007134813 -prefsHandle 2128 -prefMapHandle 2124 -prefsLen 21608 -prefMapSize 233444 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {a95ee0f5-0778-4831-a020-8b74571cebc9} 4612 "\\.\pipe\gecko-crash-server-pipe.4612" 2140 1fbca004458 socket

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4612.2.1947333425\2121169125" -childID 1 -isForBrowser -prefsHandle 2812 -prefMapHandle 2788 -prefsLen 21711 -prefMapSize 233444 -jsInitHandle 1272 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {aff4be44-4d6c-4209-9714-31ab27adb23f} 4612 "\\.\pipe\gecko-crash-server-pipe.4612" 2996 1fbcded8258 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4612.3.1638844396\1023674866" -childID 2 -isForBrowser -prefsHandle 3568 -prefMapHandle 3564 -prefsLen 26109 -prefMapSize 233444 -jsInitHandle 1272 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {8bee7602-d0f3-4019-920d-1234ead7896b} 4612 "\\.\pipe\gecko-crash-server-pipe.4612" 3580 1fbbf061058 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4612.4.40831341\1637787463" -childID 3 -isForBrowser -prefsHandle 4776 -prefMapHandle 4772 -prefsLen 26168 -prefMapSize 233444 -jsInitHandle 1272 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {f7b44649-91b1-4364-9c57-2349efd9dec9} 4612 "\\.\pipe\gecko-crash-server-pipe.4612" 4788 1fbd06a7058 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4612.5.908613082\516883418" -childID 4 -isForBrowser -prefsHandle 4928 -prefMapHandle 4932 -prefsLen 26168 -prefMapSize 233444 -jsInitHandle 1272 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {0105e913-b089-43ec-b732-26ab78f0ee43} 4612 "\\.\pipe\gecko-crash-server-pipe.4612" 4920 1fbd06a8e58 tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4612.6.2020591663\1455326771" -childID 5 -isForBrowser -prefsHandle 5092 -prefMapHandle 5096 -prefsLen 26168 -prefMapSize 233444 -jsInitHandle 1272 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -appDir "C:\Program Files\Mozilla Firefox\browser" - {0c025b60-9cea-4dd4-a829-b58912fc55fa} 4612 "\\.\pipe\gecko-crash-server-pipe.4612" 4696 1fbd0714b58 tab

C:\Windows\System32\NOTEPAD.EXE

"C:\Windows\System32\NOTEPAD.EXE" C:\Users\Admin\Desktop\ddso.bat

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\Users\Admin\Desktop\ddso.bat" "

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\System32\Conhost.exe

\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\System32\Conhost.exe

\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /K ddso.bat

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

C:\Windows\system32\PING.EXE

ping 93.158.183.97

Network

Country Destination Domain Proto
US 8.8.8.8:53 google.com udp
FR 142.250.201.174:443 google.com tcp
US 8.8.8.8:53 google.com udp
US 8.8.8.8:53 google.com udp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 shavar.prod.mozaws.net udp
US 8.8.8.8:53 prod.content-signature-chains.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 shavar.prod.mozaws.net udp
US 8.8.8.8:53 prod.content-signature-chains.prod.webservices.mozgcp.net udp
US 8.8.8.8:53 174.201.250.142.in-addr.arpa udp
US 8.8.8.8:53 166.188.117.34.in-addr.arpa udp
N/A 127.0.0.1:49768 tcp
FR 142.250.201.174:443 google.com udp
US 8.8.8.8:53 www.google.com udp
FR 172.217.20.196:443 www.google.com tcp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
FR 172.217.20.196:443 www.google.com udp
US 8.8.8.8:53 34.42.82.35.in-addr.arpa udp
US 8.8.8.8:53 196.20.217.172.in-addr.arpa udp
US 8.8.8.8:53 227.74.250.142.in-addr.arpa udp
N/A 127.0.0.1:49774 tcp
US 8.8.8.8:53 67.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 48.229.111.52.in-addr.arpa udp
US 8.8.8.8:53 171.117.168.52.in-addr.arpa udp
US 8.8.8.8:53 81.144.22.2.in-addr.arpa udp

Files

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\datareporting\glean\pending_pings\39e2672e-07dc-4e33-8f77-2246eca2ffcf

MD5 8fa08f5c3d7654cf303b1e138a4d0c3a
SHA1 30d54f77d82ce88795d75258de0c4b1806415f7c
SHA256 deb459ea59850f1e286f0e85f4ceae61befe066532ec9a9210d6f831d88d2ca4
SHA512 982f575542c15900c08b2313edfad75d7c81c569666476f11868b64e75dd7d2b1b18874b0aa0f0dfe51542644371baeafc12c837482f2727428a157050979492

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\datareporting\glean\pending_pings\5d0c7855-05ba-408a-b9b3-0c74fa8110de

MD5 78558e875161dabb3ab57e12f1bf3bad
SHA1 31b8d2fb23d849d00f33045a05d1fbc0798e3847
SHA256 e41f845395d3e1ffe59941fdf6e2b24ff09b7cd377490a2dfed4d0464a0fc06c
SHA512 60d6ef14d0e62525db0d0bb1830e5af1f870804504a62aa3fe345d3910b84b966756aec01e63e649c876b9255ab7ac9dab13230bfc0d6f33922622d845b537ca

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\datareporting\glean\db\data.safe.bin

MD5 cc373309c1cea3abfeb29f57310b570d
SHA1 8c690ce7d435727d3fa72265e139a011570997f7
SHA256 2bd487844361a5a8027bcf67cd6ecaf802e289d01860c9288245b387377321a6
SHA512 4a211eef763a4b1579d4f3007dbe6c6d46761d02fb5d713d8b91081999b61025ee1d09b41614ab6cfc1b26208ff1e303a4236719b49803496e35f0223735e964

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite

MD5 acb98d3d4e718735b97cfa91dc502aeb
SHA1 169e52e36b0118c591b2c7c4566f7d24bb48a1fe
SHA256 d7f03e1c2f27c7dcae5c28ea3c52ddb1d5c8086870d28206e8afc039d6779ce5
SHA512 a8aa54bcc302f0e67fc2d856e540696259ef259dfc9ca8cf59a02a9552f86e004a251129ea53acd0109f6c6e10395003c884bf45a25424a93165b1b25b883227

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\prefs-1.js

MD5 993044444f9456c8d0b6ddf361bbc4c1
SHA1 641c607794ecbf79fb6515417ce770be8314ea99
SHA256 303ef9176d53423237c1a383694b98d89bb5e855e2c7fd72271f139ebfe27919
SHA512 07fa8e5f7f8fa6fc0912bc99dcacbfa3e7b1528851ef0f1b6070275adf949ecb5ad3472849d8deb476963ced53b122acda1e24ad789543281accff062aaeac46

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\wjyk7j4u.default-release\sessionstore.jsonlz4

MD5 a70e59fce902ac31ae4f5d3e081cdebf
SHA1 ac41dd1ed34444fa9aa40e4cfea549e56ec833b8
SHA256 e99f7de2e529d4faf6db14db4398fbb1d721749b8bda0232d134a491d77e649d
SHA512 cec4860444bf918f8367dc812eae2f7c331c9e131b8c4fcadc40f05f4e20d94b7d16d029e9389147c1f2a396c108d5ced648dcf0950450c495f8a374e77f38c0

C:\Users\Admin\Desktop\ddso.bat

MD5 5d358659f01c85ff11f173091c37ec41
SHA1 e478bbf988d4aa529ee8e597b47914ad273b6da0
SHA256 a32cf357884773e58b1aef37fea3999c191fbbe91960f7555d6c2b0914522d1d
SHA512 d9eac59c3d8f7af810ab89db89a036b80614364b10419ba17a4ca0c8d66c54a6d7a8f4583c43d2c308d0a884309a41f27e59dd45d590076cc44eed61a3b3a6f3