Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
2692s -
max time network
2607s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
12/10/2024, 23:40
Static task
static1
Behavioral task
behavioral1
Sample
INVERT.bat
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
INVERT.bat
Resource
win10v2004-20241007-en
General
-
Target
INVERT.bat
-
Size
4KB
-
MD5
6d406d3c67470f03334e78672648da02
-
SHA1
b1f93705d5744c96d7785de6dcc79c18ec836328
-
SHA256
081f8a974349d55e9deacced8386c1ee9c9bee50af6b14d152f5b5df825f3619
-
SHA512
b5c5f2787efb705c3a1f42b76a2e4b20dfaf4207e2d2e65ad806acaf08610d3a322d4f2c086f5aa2fcea30d81eea1a83e3c7a7e388845d4f41e11636c88768f3
-
SSDEEP
96:2YkzWe64y+VqJN52piP5izzMxZTCdlA8H8dL2+:2YGVqJNg4P5g+O/ud
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-493223053-2004649691-1575712786-1000\Control Panel\International\Geo\Nation cmd.exe -
Drops file in Windows directory 64 IoCs
description ioc Process File opened for modification C:\Windows\Debug\WIA\wiatrace.log mspaint.exe File opened for modification C:\Windows\Debug\WIA\wiatrace.log mspaint.exe File opened for modification C:\Windows\Debug\WIA\wiatrace.log Process not Found File opened for modification C:\Windows\Debug\WIA\wiatrace.log Process not Found File opened for modification C:\Windows\Debug\WIA\wiatrace.log Process not Found File opened for modification C:\Windows\Debug\WIA\wiatrace.log Process not Found File opened for modification C:\Windows\Debug\WIA\wiatrace.log Process not Found File opened for modification C:\Windows\Debug\WIA\wiatrace.log Process not Found File opened for modification C:\Windows\Debug\WIA\wiatrace.log Process not Found File opened for modification C:\Windows\Debug\WIA\wiatrace.log Process not Found File opened for modification C:\Windows\Debug\WIA\wiatrace.log Process not Found File opened for modification C:\Windows\Debug\WIA\wiatrace.log Process not Found File opened for modification C:\Windows\Debug\WIA\wiatrace.log Process not Found File opened for modification C:\Windows\Debug\WIA\wiatrace.log Process not Found File opened for modification C:\Windows\Debug\WIA\wiatrace.log Process not Found File opened for modification C:\Windows\Debug\WIA\wiatrace.log Process not Found File opened for modification C:\Windows\Debug\WIA\wiatrace.log Process not Found File opened for modification C:\Windows\Debug\WIA\wiatrace.log Process not Found File opened for modification C:\Windows\Debug\WIA\wiatrace.log Process not Found File opened for modification C:\Windows\Debug\WIA\wiatrace.log Process not Found File opened for modification C:\Windows\Debug\WIA\wiatrace.log Process not Found File opened for modification C:\Windows\Debug\WIA\wiatrace.log Process not Found File opened for modification C:\Windows\Debug\WIA\wiatrace.log Process not Found File opened for modification C:\Windows\Debug\WIA\wiatrace.log Process not Found File opened for modification C:\Windows\Debug\WIA\wiatrace.log Process not Found File opened for modification C:\Windows\Debug\WIA\wiatrace.log Process not Found File opened for modification C:\Windows\Debug\WIA\wiatrace.log mspaint.exe File opened for modification C:\Windows\Debug\WIA\wiatrace.log mspaint.exe File opened for modification C:\Windows\Debug\WIA\wiatrace.log Process not Found File opened for modification C:\Windows\Debug\WIA\wiatrace.log Process not Found File opened for modification C:\Windows\Debug\WIA\wiatrace.log Process not Found File opened for modification C:\Windows\Debug\WIA\wiatrace.log Process not Found File opened for modification C:\Windows\Debug\WIA\wiatrace.log Process not Found File opened for modification C:\Windows\Debug\WIA\wiatrace.log mspaint.exe File opened for modification C:\Windows\Debug\WIA\wiatrace.log Process not Found File opened for modification C:\Windows\Debug\WIA\wiatrace.log Process not Found File opened for modification C:\Windows\Debug\WIA\wiatrace.log Process not Found File opened for modification C:\Windows\Debug\WIA\wiatrace.log Process not Found File opened for modification C:\Windows\Debug\WIA\wiatrace.log mspaint.exe File opened for modification C:\Windows\Debug\WIA\wiatrace.log mspaint.exe File opened for modification C:\Windows\Debug\WIA\wiatrace.log Process not Found File opened for modification C:\Windows\Debug\WIA\wiatrace.log Process not Found File opened for modification C:\Windows\Debug\WIA\wiatrace.log Process not Found File opened for modification C:\Windows\Debug\WIA\wiatrace.log Process not Found File opened for modification C:\Windows\Debug\WIA\wiatrace.log mspaint.exe File opened for modification C:\Windows\Debug\WIA\wiatrace.log Process not Found File opened for modification C:\Windows\Debug\WIA\wiatrace.log Process not Found File opened for modification C:\Windows\Debug\WIA\wiatrace.log Process not Found File opened for modification C:\Windows\Debug\WIA\wiatrace.log Process not Found File opened for modification C:\Windows\Debug\WIA\wiatrace.log Process not Found File opened for modification C:\Windows\Debug\WIA\wiatrace.log Process not Found File opened for modification C:\Windows\Debug\WIA\wiatrace.log Process not Found File opened for modification C:\Windows\Debug\WIA\wiatrace.log Process not Found File opened for modification C:\Windows\Debug\WIA\wiatrace.log Process not Found File opened for modification C:\Windows\Debug\WIA\wiatrace.log Process not Found File opened for modification C:\Windows\Debug\WIA\wiatrace.log Process not Found File opened for modification C:\Windows\Debug\WIA\wiatrace.log mspaint.exe File opened for modification C:\Windows\Debug\WIA\wiatrace.log mspaint.exe File opened for modification C:\Windows\Debug\WIA\wiatrace.log Process not Found File opened for modification C:\Windows\Debug\WIA\wiatrace.log Process not Found File opened for modification C:\Windows\Debug\WIA\wiatrace.log Process not Found File opened for modification C:\Windows\Debug\WIA\wiatrace.log Process not Found File opened for modification C:\Windows\Debug\WIA\wiatrace.log Process not Found File opened for modification C:\Windows\Debug\WIA\wiatrace.log Process not Found -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 64 IoCs
Adversaries may check for Internet connectivity on compromised systems.
pid Process 9472 Process not Found 5716 Process not Found 12640 Process not Found 2392 Process not Found 1672 Process not Found 7248 SnippingTool.exe 5200 Process not Found 6276 Process not Found 5840 SnippingTool.exe 6004 Process not Found 6360 Process not Found 9804 Process not Found 8520 Process not Found 5596 Process not Found 856 Process not Found 8384 SnippingTool.exe 9608 Process not Found 3432 Process not Found 5352 Process not Found 6496 Process not Found 7416 Process not Found 1696 Process not Found 10752 Process not Found 8848 SnippingTool.exe 9228 Process not Found 4888 Process not Found 3536 Process not Found 12360 Process not Found 7684 SnippingTool.exe 9280 Process not Found 6776 Process not Found 10356 Process not Found 6156 Process not Found 12624 Process not Found 5792 SnippingTool.exe 8984 Process not Found 9932 Process not Found 7716 SnippingTool.exe 6072 Process not Found 6372 Process not Found 4292 Process not Found 8140 Process not Found 9432 Process not Found 5228 Process not Found 3724 Process not Found 8524 SnippingTool.exe 6580 Process not Found 2224 Process not Found 548 Process not Found 12812 Process not Found 13276 Process not Found 12696 Process not Found 1828 Process not Found 1756 Process not Found 5904 Process not Found 9464 Process not Found 640 Process not Found 6104 Process not Found 11304 Process not Found 6964 Process not Found 6176 Process not Found 4028 Process not Found 11120 Process not Found 10752 Process not Found -
Checks SCSI registry key(s) 3 TTPs 6 IoCs
SCSI information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000 Process not Found Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_QEMU&PROD_QEMU_DVD-ROM\4&215468A5&0&010000 Process not Found Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\ConfigFlags Process not Found Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\HardwareID Process not Found Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\HardwareID Process not Found -
Delays execution with timeout.exe 64 IoCs
pid Process 6260 timeout.exe 9224 timeout.exe 5048 timeout.exe 6276 timeout.exe 4292 timeout.exe 5488 timeout.exe 7096 timeout.exe 9292 timeout.exe 5992 timeout.exe 10112 timeout.exe 5704 timeout.exe 3936 Process not Found 13172 Process not Found 1752 timeout.exe 3352 timeout.exe 1684 timeout.exe 11124 Process not Found 5744 Process not Found 8832 timeout.exe 9940 timeout.exe 2788 timeout.exe 8544 timeout.exe 3076 timeout.exe 6404 timeout.exe 7112 timeout.exe 6308 timeout.exe 3140 timeout.exe 1392 timeout.exe 10272 Process not Found 8760 Process not Found 12692 Process not Found 4908 timeout.exe 8316 timeout.exe 8656 timeout.exe 8984 timeout.exe 5220 timeout.exe 6372 timeout.exe 9696 timeout.exe 2716 timeout.exe 6844 timeout.exe 8452 timeout.exe 1336 timeout.exe 8224 timeout.exe 3344 timeout.exe 6104 timeout.exe 5260 timeout.exe 9328 Process not Found 9444 Process not Found 4828 timeout.exe 7216 timeout.exe 8888 timeout.exe 5888 timeout.exe 7832 timeout.exe 8984 timeout.exe 4532 timeout.exe 6944 timeout.exe 8624 timeout.exe 4752 timeout.exe 6560 timeout.exe 2852 timeout.exe 8364 timeout.exe 3516 timeout.exe 4580 timeout.exe 8760 timeout.exe -
Enumerates system info in registry 2 TTPs 2 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS Process not Found Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU Process not Found -
Modifies data under HKEY_USERS 18 IoCs
description ioc Process Key created \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\26\52C64B7E Process not Found Key created \REGISTRY\USER\.DEFAULT\Software Process not Found Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople Process not Found Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed Process not Found Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust Process not Found Key created \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache Process not Found Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA Process not Found Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft Process not Found Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople Process not Found Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust Process not Found Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft Process not Found Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed Process not Found Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root Process not Found Key created \REGISTRY\USER\.DEFAULT\Software\Policies Process not Found Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates Process not Found Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing Process not Found Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates Process not Found Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA Process not Found -
Modifies registry class 64 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-493223053-2004649691-1575712786-1000_Classes\Local Settings Process not Found Key created \REGISTRY\USER\S-1-5-21-493223053-2004649691-1575712786-1000_Classes\Local Settings Process not Found Key created \REGISTRY\USER\S-1-5-21-493223053-2004649691-1575712786-1000_Classes\Local Settings Process not Found Key created \REGISTRY\USER\S-1-5-21-493223053-2004649691-1575712786-1000_Classes\Local Settings Process not Found Key created \REGISTRY\USER\S-1-5-21-493223053-2004649691-1575712786-1000_Classes\Local Settings calc.exe Key created \REGISTRY\USER\S-1-5-21-493223053-2004649691-1575712786-1000_Classes\Local Settings calc.exe Key created \REGISTRY\USER\S-1-5-21-493223053-2004649691-1575712786-1000_Classes\Local Settings Process not Found Key created \REGISTRY\USER\S-1-5-21-493223053-2004649691-1575712786-1000_Classes\Local Settings Process not Found Key created \REGISTRY\USER\S-1-5-21-493223053-2004649691-1575712786-1000_Classes\Local Settings Process not Found Key created \REGISTRY\USER\S-1-5-21-493223053-2004649691-1575712786-1000_Classes\Local Settings Process not Found Key created \REGISTRY\USER\S-1-5-21-493223053-2004649691-1575712786-1000_Classes\Local Settings Process not Found Key created \REGISTRY\USER\S-1-5-21-493223053-2004649691-1575712786-1000_Classes\Local Settings Process not Found Key created \REGISTRY\USER\S-1-5-21-493223053-2004649691-1575712786-1000_Classes\Local Settings Process not Found Key created \REGISTRY\USER\S-1-5-21-493223053-2004649691-1575712786-1000_Classes\Local Settings Process not Found Key created \REGISTRY\USER\S-1-5-21-493223053-2004649691-1575712786-1000_Classes\Local Settings Process not Found Key created \REGISTRY\USER\S-1-5-21-493223053-2004649691-1575712786-1000_Classes\Local Settings Process not Found Key created \REGISTRY\USER\S-1-5-21-493223053-2004649691-1575712786-1000_Classes\Local Settings Process not Found Key created \REGISTRY\USER\S-1-5-21-493223053-2004649691-1575712786-1000_Classes\Local Settings Process not Found Key created \REGISTRY\USER\S-1-5-21-493223053-2004649691-1575712786-1000_Classes\Local Settings Process not Found Key created \REGISTRY\USER\S-1-5-21-493223053-2004649691-1575712786-1000_Classes\Local Settings Process not Found Key created \REGISTRY\USER\S-1-5-21-493223053-2004649691-1575712786-1000_Classes\Local Settings Process not Found Key created \REGISTRY\USER\S-1-5-21-493223053-2004649691-1575712786-1000_Classes\Local Settings Process not Found Key created \REGISTRY\USER\S-1-5-21-493223053-2004649691-1575712786-1000_Classes\Local Settings Process not Found Key created \REGISTRY\USER\S-1-5-21-493223053-2004649691-1575712786-1000_Classes\Local Settings calc.exe Key created \REGISTRY\USER\S-1-5-21-493223053-2004649691-1575712786-1000_Classes\Local Settings calc.exe Key created \REGISTRY\USER\S-1-5-21-493223053-2004649691-1575712786-1000_Classes\Local Settings Process not Found Key created \REGISTRY\USER\S-1-5-21-493223053-2004649691-1575712786-1000_Classes\Local Settings Process not Found Key created \REGISTRY\USER\S-1-5-21-493223053-2004649691-1575712786-1000_Classes\Local Settings Process not Found Key created \REGISTRY\USER\S-1-5-21-493223053-2004649691-1575712786-1000_Classes\Local Settings Process not Found Key created \REGISTRY\USER\S-1-5-21-493223053-2004649691-1575712786-1000_Classes\Local Settings Process not Found Key created \REGISTRY\USER\S-1-5-21-493223053-2004649691-1575712786-1000_Classes\Local Settings Process not Found Key created \REGISTRY\USER\S-1-5-21-493223053-2004649691-1575712786-1000_Classes\Local Settings Process not Found Key created \REGISTRY\USER\S-1-5-21-493223053-2004649691-1575712786-1000_Classes\Local Settings Process not Found Key created \REGISTRY\USER\S-1-5-21-493223053-2004649691-1575712786-1000_Classes\Local Settings Process not Found Key created \REGISTRY\USER\S-1-5-21-493223053-2004649691-1575712786-1000_Classes\Local Settings Process not Found Key created \REGISTRY\USER\S-1-5-21-493223053-2004649691-1575712786-1000_Classes\Local Settings Process not Found Key created \REGISTRY\USER\S-1-5-21-493223053-2004649691-1575712786-1000_Classes\Local Settings Process not Found Key created \REGISTRY\USER\S-1-5-21-493223053-2004649691-1575712786-1000_Classes\Local Settings calc.exe Key created \REGISTRY\USER\S-1-5-21-493223053-2004649691-1575712786-1000_Classes\Local Settings Process not Found Key created \REGISTRY\USER\S-1-5-21-493223053-2004649691-1575712786-1000_Classes\Local Settings Process not Found Key created \REGISTRY\USER\S-1-5-21-493223053-2004649691-1575712786-1000_Classes\Local Settings Process not Found Key created \REGISTRY\USER\S-1-5-21-493223053-2004649691-1575712786-1000_Classes\Local Settings Process not Found Key created \REGISTRY\USER\S-1-5-21-493223053-2004649691-1575712786-1000_Classes\Local Settings Process not Found Key created \REGISTRY\USER\S-1-5-21-493223053-2004649691-1575712786-1000_Classes\Local Settings Process not Found Key created \REGISTRY\USER\S-1-5-21-493223053-2004649691-1575712786-1000_Classes\Local Settings calc.exe Key created \REGISTRY\USER\S-1-5-21-493223053-2004649691-1575712786-1000_Classes\Local Settings Process not Found Key created \REGISTRY\USER\S-1-5-21-493223053-2004649691-1575712786-1000_Classes\Local Settings Process not Found Key created \REGISTRY\USER\S-1-5-21-493223053-2004649691-1575712786-1000_Classes\Local Settings Process not Found Key created \REGISTRY\USER\S-1-5-21-493223053-2004649691-1575712786-1000_Classes\Local Settings Process not Found Key created \REGISTRY\USER\S-1-5-21-493223053-2004649691-1575712786-1000_Classes\Local Settings Process not Found Key created \REGISTRY\USER\S-1-5-21-493223053-2004649691-1575712786-1000_Classes\Local Settings Process not Found Key created \REGISTRY\USER\S-1-5-21-493223053-2004649691-1575712786-1000_Classes\Local Settings calc.exe Key created \REGISTRY\USER\S-1-5-21-493223053-2004649691-1575712786-1000_Classes\Local Settings Process not Found Key created \REGISTRY\USER\S-1-5-21-493223053-2004649691-1575712786-1000_Classes\Local Settings Process not Found Key created \REGISTRY\USER\S-1-5-21-493223053-2004649691-1575712786-1000_Classes\Local Settings Process not Found Key created \REGISTRY\USER\S-1-5-21-493223053-2004649691-1575712786-1000_Classes\Local Settings Process not Found Key created \REGISTRY\USER\S-1-5-21-493223053-2004649691-1575712786-1000_Classes\Local Settings Process not Found Key created \REGISTRY\USER\S-1-5-21-493223053-2004649691-1575712786-1000_Classes\Local Settings Process not Found Key created \REGISTRY\USER\S-1-5-21-493223053-2004649691-1575712786-1000_Classes\Local Settings Process not Found Key created \REGISTRY\USER\S-1-5-21-493223053-2004649691-1575712786-1000_Classes\Local Settings Process not Found Key created \REGISTRY\USER\S-1-5-21-493223053-2004649691-1575712786-1000_Classes\Local Settings Process not Found Key created \REGISTRY\USER\S-1-5-21-493223053-2004649691-1575712786-1000_Classes\Local Settings Process not Found Key created \REGISTRY\USER\S-1-5-21-493223053-2004649691-1575712786-1000_Classes\Local Settings Process not Found Key created \REGISTRY\USER\S-1-5-21-493223053-2004649691-1575712786-1000_Classes\Local Settings Process not Found -
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 6592 mspaint.exe 6592 mspaint.exe 5760 mspaint.exe 5760 mspaint.exe 5568 mspaint.exe 5568 mspaint.exe 7320 mspaint.exe 7320 mspaint.exe 7456 mspaint.exe 7456 mspaint.exe 7240 mspaint.exe 7240 mspaint.exe 7980 mspaint.exe 7980 mspaint.exe 8156 mspaint.exe 8156 mspaint.exe 8220 mspaint.exe 8220 mspaint.exe 8200 mspaint.exe 8200 mspaint.exe 8820 mspaint.exe 8820 mspaint.exe 8800 mspaint.exe 8800 mspaint.exe 9220 Process not Found 9220 Process not Found 10172 Process not Found 10172 Process not Found 8216 Process not Found 8216 Process not Found 9808 Process not Found 9808 Process not Found 1632 Process not Found 1632 Process not Found 8288 Process not Found 8288 Process not Found 9500 Process not Found 9500 Process not Found 5848 Process not Found 5848 Process not Found 4856 Process not Found 4856 Process not Found 4216 Process not Found 4216 Process not Found 3884 Process not Found 3884 Process not Found 5404 Process not Found 5404 Process not Found 5344 Process not Found 5344 Process not Found 5124 Process not Found 5124 Process not Found 5892 Process not Found 5892 Process not Found 4640 Process not Found 4640 Process not Found 5148 Process not Found 5148 Process not Found 8392 Process not Found 8392 Process not Found 5128 Process not Found 5128 Process not Found 7352 Process not Found 7352 Process not Found -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4928 cmd.exe -
Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeCreateGlobalPrivilege 11776 Process not Found Token: SeChangeNotifyPrivilege 11776 Process not Found Token: 33 11776 Process not Found Token: SeIncBasePriorityPrivilege 11776 Process not Found Token: SeShutdownPrivilege 11776 Process not Found Token: SeCreatePagefilePrivilege 11776 Process not Found Token: SeShutdownPrivilege 11776 Process not Found Token: SeCreatePagefilePrivilege 11776 Process not Found Token: SeShutdownPrivilege 11776 Process not Found Token: SeCreatePagefilePrivilege 11776 Process not Found Token: SeShutdownPrivilege 11776 Process not Found Token: SeCreatePagefilePrivilege 11776 Process not Found Token: SeShutdownPrivilege 11776 Process not Found Token: SeCreatePagefilePrivilege 11776 Process not Found Token: SeShutdownPrivilege 11776 Process not Found Token: SeCreatePagefilePrivilege 11776 Process not Found Token: SeShutdownPrivilege 11776 Process not Found Token: SeCreatePagefilePrivilege 11776 Process not Found Token: SeShutdownPrivilege 11776 Process not Found Token: SeCreatePagefilePrivilege 11776 Process not Found Token: SeShutdownPrivilege 11776 Process not Found Token: SeCreatePagefilePrivilege 11776 Process not Found Token: SeShutdownPrivilege 11776 Process not Found Token: SeCreatePagefilePrivilege 11776 Process not Found Token: SeShutdownPrivilege 11776 Process not Found Token: SeCreatePagefilePrivilege 11776 Process not Found Token: SeShutdownPrivilege 11776 Process not Found Token: SeCreatePagefilePrivilege 11776 Process not Found Token: SeShutdownPrivilege 11776 Process not Found Token: SeCreatePagefilePrivilege 11776 Process not Found Token: SeShutdownPrivilege 11776 Process not Found Token: SeCreatePagefilePrivilege 11776 Process not Found Token: SeShutdownPrivilege 11776 Process not Found Token: SeCreatePagefilePrivilege 11776 Process not Found Token: SeShutdownPrivilege 11776 Process not Found Token: SeCreatePagefilePrivilege 11776 Process not Found Token: SeShutdownPrivilege 11776 Process not Found Token: SeCreatePagefilePrivilege 11776 Process not Found Token: SeShutdownPrivilege 11776 Process not Found Token: SeCreatePagefilePrivilege 11776 Process not Found Token: SeShutdownPrivilege 11776 Process not Found Token: SeCreatePagefilePrivilege 11776 Process not Found Token: SeShutdownPrivilege 11776 Process not Found Token: SeCreatePagefilePrivilege 11776 Process not Found Token: SeShutdownPrivilege 11776 Process not Found Token: SeCreatePagefilePrivilege 11776 Process not Found Token: SeShutdownPrivilege 11776 Process not Found Token: SeCreatePagefilePrivilege 11776 Process not Found Token: SeShutdownPrivilege 11776 Process not Found Token: SeCreatePagefilePrivilege 11776 Process not Found Token: SeShutdownPrivilege 11776 Process not Found Token: SeCreatePagefilePrivilege 11776 Process not Found Token: SeShutdownPrivilege 11776 Process not Found Token: SeCreatePagefilePrivilege 11776 Process not Found Token: SeShutdownPrivilege 11776 Process not Found Token: SeCreatePagefilePrivilege 11776 Process not Found Token: SeShutdownPrivilege 11776 Process not Found Token: SeCreatePagefilePrivilege 11776 Process not Found Token: SeShutdownPrivilege 11776 Process not Found Token: SeCreatePagefilePrivilege 11776 Process not Found Token: SeShutdownPrivilege 11776 Process not Found Token: SeCreatePagefilePrivilege 11776 Process not Found Token: SeShutdownPrivilege 11776 Process not Found Token: SeCreatePagefilePrivilege 11776 Process not Found -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 5352 Process not Found -
Suspicious use of SetWindowsHookEx 64 IoCs
pid Process 6592 mspaint.exe 6592 mspaint.exe 6592 mspaint.exe 6592 mspaint.exe 6232 wordpad.exe 6232 wordpad.exe 6232 wordpad.exe 6232 wordpad.exe 6232 wordpad.exe 5760 mspaint.exe 7064 wordpad.exe 7064 wordpad.exe 7064 wordpad.exe 5792 SnippingTool.exe 7064 wordpad.exe 7064 wordpad.exe 5760 mspaint.exe 5760 mspaint.exe 5760 mspaint.exe 5568 mspaint.exe 6896 wordpad.exe 6896 wordpad.exe 6896 wordpad.exe 6896 wordpad.exe 6896 wordpad.exe 5568 mspaint.exe 5568 mspaint.exe 5568 mspaint.exe 7320 mspaint.exe 6120 wordpad.exe 6120 wordpad.exe 6120 wordpad.exe 7320 mspaint.exe 7320 mspaint.exe 7320 mspaint.exe 6120 wordpad.exe 6120 wordpad.exe 7456 mspaint.exe 7616 wordpad.exe 7616 wordpad.exe 7616 wordpad.exe 7456 mspaint.exe 7456 mspaint.exe 7456 mspaint.exe 4152 OpenWith.exe 7616 wordpad.exe 7616 wordpad.exe 7240 mspaint.exe 7480 OpenWith.exe 7388 wordpad.exe 7388 wordpad.exe 7388 wordpad.exe 7240 mspaint.exe 7240 mspaint.exe 7240 mspaint.exe 7388 wordpad.exe 7388 wordpad.exe 7980 mspaint.exe 8176 wordpad.exe 8176 wordpad.exe 8176 wordpad.exe 6760 OpenWith.exe 8012 OpenWith.exe 8176 wordpad.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 4928 wrote to memory of 4044 4928 cmd.exe 83 PID 4928 wrote to memory of 4044 4928 cmd.exe 83 PID 4928 wrote to memory of 1260 4928 cmd.exe 84 PID 4928 wrote to memory of 1260 4928 cmd.exe 84 PID 4928 wrote to memory of 1720 4928 cmd.exe 86 PID 4928 wrote to memory of 1720 4928 cmd.exe 86 PID 4928 wrote to memory of 4836 4928 cmd.exe 88 PID 4928 wrote to memory of 4836 4928 cmd.exe 88 PID 4928 wrote to memory of 3984 4928 cmd.exe 89 PID 4928 wrote to memory of 3984 4928 cmd.exe 89 PID 4928 wrote to memory of 4820 4928 cmd.exe 91 PID 4928 wrote to memory of 4820 4928 cmd.exe 91 PID 4044 wrote to memory of 1160 4044 cmd.exe 92 PID 4044 wrote to memory of 1160 4044 cmd.exe 92 PID 1720 wrote to memory of 756 1720 cmd.exe 94 PID 1720 wrote to memory of 756 1720 cmd.exe 94 PID 4928 wrote to memory of 1804 4928 cmd.exe 93 PID 4928 wrote to memory of 1804 4928 cmd.exe 93 PID 4928 wrote to memory of 4524 4928 cmd.exe 95 PID 4928 wrote to memory of 4524 4928 cmd.exe 95 PID 4928 wrote to memory of 4208 4928 cmd.exe 97 PID 4928 wrote to memory of 4208 4928 cmd.exe 97 PID 4928 wrote to memory of 3064 4928 cmd.exe 98 PID 4928 wrote to memory of 3064 4928 cmd.exe 98 PID 4928 wrote to memory of 2256 4928 cmd.exe 100 PID 4928 wrote to memory of 2256 4928 cmd.exe 100 PID 4928 wrote to memory of 3484 4928 cmd.exe 101 PID 4928 wrote to memory of 3484 4928 cmd.exe 101 PID 3984 wrote to memory of 3140 3984 cmd.exe 102 PID 3984 wrote to memory of 3140 3984 cmd.exe 102 PID 1804 wrote to memory of 1416 1804 cmd.exe 104 PID 1804 wrote to memory of 1416 1804 cmd.exe 104 PID 4928 wrote to memory of 2016 4928 cmd.exe 105 PID 4928 wrote to memory of 2016 4928 cmd.exe 105 PID 4208 wrote to memory of 2456 4208 cmd.exe 106 PID 4208 wrote to memory of 2456 4208 cmd.exe 106 PID 4928 wrote to memory of 4776 4928 cmd.exe 108 PID 4928 wrote to memory of 4776 4928 cmd.exe 108 PID 4928 wrote to memory of 1220 4928 cmd.exe 109 PID 4928 wrote to memory of 1220 4928 cmd.exe 109 PID 2256 wrote to memory of 1168 2256 cmd.exe 110 PID 2256 wrote to memory of 1168 2256 cmd.exe 110 PID 4928 wrote to memory of 1128 4928 cmd.exe 112 PID 4928 wrote to memory of 1128 4928 cmd.exe 112 PID 4928 wrote to memory of 4452 4928 cmd.exe 113 PID 4928 wrote to memory of 4452 4928 cmd.exe 113 PID 4928 wrote to memory of 2496 4928 cmd.exe 114 PID 4928 wrote to memory of 2496 4928 cmd.exe 114 PID 4928 wrote to memory of 4768 4928 cmd.exe 116 PID 4928 wrote to memory of 4768 4928 cmd.exe 116 PID 2016 wrote to memory of 1392 2016 cmd.exe 117 PID 2016 wrote to memory of 1392 2016 cmd.exe 117 PID 4928 wrote to memory of 3948 4928 cmd.exe 118 PID 4928 wrote to memory of 3948 4928 cmd.exe 118 PID 4928 wrote to memory of 532 4928 cmd.exe 120 PID 4928 wrote to memory of 532 4928 cmd.exe 120 PID 4928 wrote to memory of 4756 4928 cmd.exe 185 PID 4928 wrote to memory of 4756 4928 cmd.exe 185 PID 1220 wrote to memory of 4356 1220 cmd.exe 123 PID 1220 wrote to memory of 4356 1220 cmd.exe 123 PID 4928 wrote to memory of 1064 4928 cmd.exe 124 PID 4928 wrote to memory of 1064 4928 cmd.exe 124 PID 4928 wrote to memory of 1828 4928 cmd.exe 126 PID 4928 wrote to memory of 1828 4928 cmd.exe 126
Processes
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\INVERT.bat"1⤵
- Checks computer location settings
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of WriteProcessMemory
PID:4928 -
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵
- Suspicious use of WriteProcessMemory
PID:4044 -
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:1160
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:1260
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵
- Suspicious use of WriteProcessMemory
PID:1720 -
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:756
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:4836
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵
- Suspicious use of WriteProcessMemory
PID:3984 -
C:\Windows\system32\timeout.exetimeout /t 103⤵
- Delays execution with timeout.exe
PID:3140
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:4820
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵
- Suspicious use of WriteProcessMemory
PID:1804 -
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:1416
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:4524
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵
- Suspicious use of WriteProcessMemory
PID:4208 -
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:2456
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:3064
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵
- Suspicious use of WriteProcessMemory
PID:2256 -
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:1168
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:3484
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵
- Suspicious use of WriteProcessMemory
PID:2016 -
C:\Windows\system32\timeout.exetimeout /t 103⤵
- Delays execution with timeout.exe
PID:1392
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:4776
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵
- Suspicious use of WriteProcessMemory
PID:1220 -
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:4356
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:1128
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:4452
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:2936
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:2496
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:4768
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:3296
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:3948
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:532
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:312
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:4756
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:1064
-
C:\Windows\system32\timeout.exetimeout /t 103⤵
- Delays execution with timeout.exe
PID:4828
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:1828
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:2320
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:2308
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:1464
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:1296
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:4680
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:4764
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:3096
-
C:\Windows\system32\timeout.exetimeout /t 103⤵
- Delays execution with timeout.exe
PID:1752
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:3532
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:852
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:2804
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:2720
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:3416
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:896
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵
- Delays execution with timeout.exe
PID:4292
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:4724
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:3708
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:4360
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:4848
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:4728
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵
- Delays execution with timeout.exe
PID:2788
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:4104
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:4248
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:1496
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:2340
-
C:\Windows\system32\timeout.exetimeout /t 103⤵
- Delays execution with timeout.exe
PID:1336
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:1048
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:3972
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:4912
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:2236
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:2440
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:3684
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:656
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:4324
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:4932
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:4332
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:1260
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:2296
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:4836
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:2184
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:3360
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:1196
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:4756
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:1048
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:1644
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:3548
-
C:\Windows\System32\Conhost.exe\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV13⤵PID:3532
-
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:4020
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:4128
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:4360
-
C:\Windows\System32\Conhost.exe\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV13⤵PID:2788
-
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:512
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:4572
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:1660
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:5188
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:4332
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:2868
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:5288
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:2548
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:5132
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:5340
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:5144
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:5196
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:5400
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:5204
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:5260
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:5444
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:5296
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:5364
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:5572
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:5376
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:5460
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:5640
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:5484
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:5508
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:5676
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:5516
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:5592
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:5776
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:5608
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:5664
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:5840
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:5692
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:5740
-
C:\Windows\system32\timeout.exetimeout /t 103⤵
- Delays execution with timeout.exe
PID:5888
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:5764
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:5816
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:6040
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:5832
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:5880
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:6076
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:5904
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:5964
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:6120
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:5980
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:6024
-
C:\Windows\system32\timeout.exetimeout /t 103⤵
- Delays execution with timeout.exe
PID:5488
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:6056
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:6112
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:5768
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:4332
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:5284
-
C:\Windows\System32\Conhost.exe\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV13⤵PID:5296
-
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:5992
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:5328
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:5556
-
C:\Windows\System32\Conhost.exe\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV13⤵PID:5608
-
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:5228
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:5604
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:5792
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:6184
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:5900
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:6136
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:6280
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:3428
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:6156
-
C:\Windows\system32\timeout.exetimeout /t 103⤵
- Delays execution with timeout.exe
PID:6372
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:6172
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:6232
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:6364
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:6248
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:6292
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:6464
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:6312
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:6396
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:6580
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:6420
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:6448
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:6692
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:6456
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:6528
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:6708
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:6548
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:6604
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:6804
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:6620
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:6660
-
C:\Windows\system32\timeout.exetimeout /t 103⤵
- Delays execution with timeout.exe
PID:6844
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:6668
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:6752
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:6956
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:6768
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:6832
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:7032
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:6860
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:6896
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:7056
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:6932
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:6980
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:6244
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:7004
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:7072
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:6420
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:7092
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:7120
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:6616
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:7136
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:6248
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:4016
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:6416
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:6552
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:3112
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:6640
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:6772
-
C:\Windows\system32\timeout.exetimeout /t 103⤵
- Delays execution with timeout.exe
PID:3352
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:6788
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:3012
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:7140
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:1836
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:1776
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:6768
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵
- Delays execution with timeout.exe
PID:4580
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:4692
-
C:\Windows\System32\Conhost.exe\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV13⤵PID:7136
-
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:7172
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:6424
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:6788
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:7252
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:2168
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:6620
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:7336
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:2284
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:7200
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:7344
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵
- Delays execution with timeout.exe
PID:7216
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:7280
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:7440
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:7300
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:7372
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:7512
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:7396
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:7432
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:7588
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:7452
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:7504
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:7648
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:7564
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:7600
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:7752
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:7620
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:7656
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:7840
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:7688
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:7728
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:7880
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:7736
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:7816
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:7956
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵
- Delays execution with timeout.exe
PID:7832
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:7896
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:8072
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:7920
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:7964
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:8176
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:8008
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:8028
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:8168
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:8048
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:8100
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:7400
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:8136
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:7212
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:3388
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:7216
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:7492
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:7780
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:4704
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:7688
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:7740
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:716
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:7828
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:7832
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:7916
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:8136
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:8280
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:7300
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:4704
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:8316
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:8204
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:8248
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:8384
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:8264
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:8340
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:8512
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:8356
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:8416
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:8600
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:8432
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:8468
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:8676
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:8488
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:8536
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:8768
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵
- Delays execution with timeout.exe
PID:8544
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:8612
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:8840
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:8632
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:8668
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:8856
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:8684
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:8748
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:8944
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵
- Delays execution with timeout.exe
PID:8760
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:8816
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:9064
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵
- Delays execution with timeout.exe
PID:8832
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:8904
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:9088
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:8920
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:8968
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:9116
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:8984
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:9040
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:9188
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:9056
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:9132
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:8352
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:9172
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:8204
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:8920
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:4712
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:8452
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:9200
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:8508
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:8632
-
C:\Windows\System32\Conhost.exe\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV13⤵PID:8684
-
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:8712
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:8688
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:8924
-
C:\Windows\system32\timeout.exetimeout /t 103⤵
- Delays execution with timeout.exe
PID:9224
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:8984
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:9212
-
C:\Windows\System32\Conhost.exe\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV13⤵PID:8356
-
-
C:\Windows\system32\timeout.exetimeout /t 103⤵
- Delays execution with timeout.exe
PID:9292
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:2216
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:9056
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:9488
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:2216
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:9284
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:9440
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:9308
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:9360
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:9608
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:9380
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:9416
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:9712
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:9424
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:9480
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:9652
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:9504
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:9568
-
C:\Windows\system32\timeout.exetimeout /t 103⤵
- Delays execution with timeout.exe
PID:9696
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:9616
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:9664
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:9844
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:9676
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:9744
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:9904
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:9800
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:9856
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:9988
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:9876
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:9912
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:10080
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:9920
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:10008
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:10228
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:10020
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:10064
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:9264
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:10100
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:10136
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:9500
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:10144
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:10192
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:636
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:10200
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:9308
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:3992
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:9384
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:9676
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:5008
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:9764
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:2436
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:2016
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:1168
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:9804
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:5108
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:4984
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:1936
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:9976
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:9836
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:4548
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:10176
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:2528
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:3996
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:4180
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:9940
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:10076
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:5100
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:10156
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:1100
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:2064
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:1876
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:1424
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:1740
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵
- Delays execution with timeout.exe
PID:4752
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:4248
-
C:\Windows\system32\timeout.exetimeout /t 103⤵
- Delays execution with timeout.exe
PID:4908
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:2308
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:740
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:4732
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:2804
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:2704
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:2032
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:2920
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:972
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:4452
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:2964
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:3616
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:2092
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:5004
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:4848
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:2600
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:852
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:3944
-
C:\Windows\system32\timeout.exetimeout /t 103⤵
- Delays execution with timeout.exe
PID:3076
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵
- Delays execution with timeout.exe
PID:3344
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:3828
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:4216
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:1540
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:3520
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:4528
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:2276
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:4984
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:5344
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:1996
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:4412
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:1128
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:4672
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:2308
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:5324
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:2804
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:2088
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:2572
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:5360
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:4764
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:4312
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:4932
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:5172
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:1260
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:5136
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:5244
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:1300
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:5200
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:3460
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:2496
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:3584
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:4656
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:3492
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:2720
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:4552
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:548
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:5312
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:3972
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:1396
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:5336
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:5128
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:2276
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:5252
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:5224
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:5644
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:2788
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:1736
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:5892
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:9692
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:4348
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:5940
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:4520
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:4672
-
C:\Windows\system32\timeout.exetimeout /t 103⤵
- Delays execution with timeout.exe
PID:6104
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:3604
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:5876
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:5288
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:5584
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:5612
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:1464
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵
- Delays execution with timeout.exe
PID:5992
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:5412
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:6088
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:5752
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:5464
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:5976
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:4152
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:5424
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:6052
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:5632
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:5392
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:5952
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:5692
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:1048
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:4408
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:5964
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:5532
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:6096
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:5408
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:5472
-
C:\Windows\system32\timeout.exetimeout /t 103⤵
- Delays execution with timeout.exe
PID:9940
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:5748
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:5160
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:6288
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:6016
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:428
-
C:\Windows\System32\Conhost.exe\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV13⤵PID:2720
-
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:6588
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:3584
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:5332
-
C:\Windows\System32\Conhost.exe\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV13⤵PID:5252
-
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:6364
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:4512
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:2804
-
C:\Windows\system32\timeout.exetimeout /t 103⤵
- Delays execution with timeout.exe
PID:6404
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:6712
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:6824
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:6268
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:6280
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:2548
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:6572
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:6536
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:6384
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:6480
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:6296
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:6256
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:6224
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵
- Delays execution with timeout.exe
PID:6560
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:6724
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:6328
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:6736
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:6748
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:5860
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:6060
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:6564
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:5872
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:6540
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:5992
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:6244
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:5984
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:5880
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:2788
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:5440
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:7036
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:6460
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:6252
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:6716
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:6948
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵
- Delays execution with timeout.exe
PID:7096
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:6880
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:2444
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:3980
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:6884
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:3620
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:6872
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:7012
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:6216
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:4512
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:3352
-
C:\Windows\system32\timeout.exetimeout /t 103⤵
- Delays execution with timeout.exe
PID:7112
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:6616
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:6172
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:7156
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:7124
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:6796
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:5824
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵
- Delays execution with timeout.exe
PID:2852
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:6372
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:7256
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:6280
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:6560
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:7608
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵
- Delays execution with timeout.exe
PID:6260
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:5752
-
C:\Windows\System32\Conhost.exe\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV13⤵PID:5984
-
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:7364
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:5264
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:7712
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:7772
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:7628
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:7864
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:7448
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:7664
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:7204
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:7032
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:7292
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:4104
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:3320
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:788
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:2120
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:3640
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:7432
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:7268
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:7080
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:7724
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:7308
-
C:\Windows\system32\timeout.exetimeout /t 103⤵
- Delays execution with timeout.exe
PID:6944
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:7428
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:2168
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:7008
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:4832
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:7264
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:6272
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:2292
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:6680
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:7420
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:3980
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:6752
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:7828
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:6712
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:6652
-
C:\Windows\System32\Conhost.exe\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV13⤵PID:6260
-
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:7704
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:6084
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:7736
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:7816
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:7464
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:7972
-
C:\Windows\System32\Conhost.exe\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV13⤵PID:8168
-
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:7892
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:8132
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:8000
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:7492
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:8120
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:7968
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:7824
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:8080
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:8052
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:7568
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:7896
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:8060
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:6548
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:7564
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:7252
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:7788
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:8148
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:5692
-
C:\Windows\System32\Conhost.exe\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV13⤵PID:788
-
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:8680
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:7580
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:4832
-
C:\Windows\system32\timeout.exetimeout /t 103⤵
- Delays execution with timeout.exe
PID:8316
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:6252
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:8172
-
C:\Windows\System32\Conhost.exe\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV13⤵PID:7832
-
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:8728
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:8388
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:8332
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:8476
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:8308
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:8720
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:8660
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:7644
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:8464
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:8424
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:8368
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:8564
-
C:\Windows\System32\Conhost.exe\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV13⤵PID:7740
-
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:8560
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:8444
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:8456
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:8032
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:8668
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:8584
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:7944
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵
- Delays execution with timeout.exe
PID:8364
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:7528
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:6704
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:8300
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:7440
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:9172
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:8068
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:8148
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:9316
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:7040
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:8980
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:8856
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:9228
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:8428
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:8600
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:8360
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:9116
-
C:\Windows\System32\Conhost.exe\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV13⤵PID:8920
-
-
C:\Windows\system32\timeout.exetimeout /t 103⤵
- Delays execution with timeout.exe
PID:8452
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:9224
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:8548
-
C:\Windows\System32\Conhost.exe\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV13⤵PID:8832
-
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:8924
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:3472
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:9180
-
C:\Windows\system32\timeout.exetimeout /t 103⤵
- Delays execution with timeout.exe
PID:8656
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:8556
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:9044
-
C:\Windows\System32\Conhost.exe\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV13⤵PID:9132
-
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:9340
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:8632
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:9260
-
C:\Windows\System32\Conhost.exe\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV13⤵PID:8968
-
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:9208
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵
- Delays execution with timeout.exe
PID:8888
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:9040
-
C:\Windows\system32\timeout.exetimeout /t 103⤵
- Delays execution with timeout.exe
PID:8624
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:9080
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:9232
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:8256
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:9024
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:8960
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:9956
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:4308
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:8612
-
C:\Windows\system32\timeout.exetimeout /t 103⤵
- Delays execution with timeout.exe
PID:8224
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:8736
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:2292
-
C:\Windows\System32\Conhost.exe\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV13⤵PID:7040
-
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:9420
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵
- Delays execution with timeout.exe
PID:8984
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:10084
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:9476
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:9904
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:10108
-
C:\Windows\System32\Conhost.exe\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV13⤵PID:9264
-
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:9996
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:9772
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:10044
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:9432
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:8908
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:8964
-
C:\Windows\system32\timeout.exetimeout /t 103⤵
- Delays execution with timeout.exe
PID:10112
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:9696
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:9480
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:9784
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:10064
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:10028
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:8928
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:9888
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:9780
-
C:\Windows\system32\timeout.exetimeout /t 103⤵
- Delays execution with timeout.exe
PID:8984
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:9928
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:9664
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:9276
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:9752
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:3472
-
C:\Windows\System32\Conhost.exe\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV13⤵PID:9056
-
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:4044
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:8556
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:8264
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:9872
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:8808
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:9384
-
C:\Windows\System32\Conhost.exe\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV13⤵PID:2016
-
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:4460
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵
- Delays execution with timeout.exe
PID:1684
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:2216
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:3936
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:9448
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:9880
-
C:\Windows\System32\Conhost.exe\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV13⤵PID:10228
-
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:1852
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:9812
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:9188
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:9744
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:2908
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:3504
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:8740
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:9828
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:4892
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:10152
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:10140
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:1720
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:8240
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:10168
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:10088
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:10120
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:9788
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:9644
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:4320
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:9984
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:4180
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:4732
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:10020
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:1276
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:1688
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:9816
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:3480
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:4536
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:1752
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:4796
-
C:\Windows\System32\Conhost.exe\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV13⤵PID:5100
-
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:10164
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:2092
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:4456
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:3752
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:4424
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:2228
-
C:\Windows\System32\Conhost.exe\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV13⤵PID:1424
-
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:2012
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:1376
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:4596
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:2256
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:3528
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:2932
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:9424
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:972
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:372
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:9816
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:2744
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:2212
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:4860
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵
- Delays execution with timeout.exe
PID:5048
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:8952
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:4968
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:9588
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:5040
-
C:\Windows\System32\Conhost.exe\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV13⤵PID:1752
-
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:548
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:4356
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:436
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:3652
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵
- Delays execution with timeout.exe
PID:2716
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:5004
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:5444
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:5324
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:3468
-
C:\Windows\System32\Conhost.exe\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV13⤵PID:1260
-
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:3916
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:1128
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:1288
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:5152
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:3972
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:4464
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:3040
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:3940
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:1900
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:5428
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:3624
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:5280
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:4260
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:2264
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:1196
-
C:\Windows\System32\Conhost.exe\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV13⤵PID:3460
-
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:3528
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵
- Delays execution with timeout.exe
PID:5220
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:2868
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:5140
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:3708
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:3948
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:1240
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵
- Delays execution with timeout.exe
PID:4532
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:5048
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:5884
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:2032
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:4312
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:5892
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:5248
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:5716
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:6088
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵
- Delays execution with timeout.exe
PID:5704
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:116
-
C:\Windows\System32\Conhost.exe\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV13⤵PID:5288
-
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:6068
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:5528
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:3344
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:5576
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:5468
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:5024
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:4804
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:5128
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:5508
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:5740
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:5856
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:1540
-
C:\Windows\System32\Conhost.exe\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV13⤵PID:5172
-
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:5828
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:5432
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:5808
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:4828
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:5744
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:5696
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:6732
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:5672
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:1896
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:5536
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:3172
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:3708
-
C:\Windows\System32\Conhost.exe\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV13⤵PID:2744
-
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:5176
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:4532
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:5248
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:6104
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:6040
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:6108
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:5532
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:5528
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:2296
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:4520
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:4932
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:6648
-
C:\Windows\System32\Conhost.exe\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV13⤵PID:428
-
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:5348
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:2964
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:5836
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:5376
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:5684
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:2920
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:3520
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:5468
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:5496
-
C:\Windows\System32\Conhost.exe\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV13⤵PID:1048
-
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:5704
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:5896
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:5988
-
C:\Windows\system32\timeout.exetimeout /t 103⤵
- Delays execution with timeout.exe
PID:5260
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:5796
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:5236
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:1316
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:1564
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:4532
-
C:\Windows\System32\Conhost.exe\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV13⤵PID:6040
-
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:2444
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:6408
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:7044
-
C:\Windows\system32\timeout.exetimeout /t 103⤵
- Delays execution with timeout.exe
PID:3516
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:7000
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:6920
-
C:\Windows\System32\Conhost.exe\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV13⤵PID:6216
-
-
C:\Windows\system32\timeout.exetimeout /t 103⤵
- Delays execution with timeout.exe
PID:6276
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:6568
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:5320
-
C:\Windows\System32\Conhost.exe\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV13⤵PID:6480
-
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:6924
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:6248
-
-
C:\Windows\system32\cmd.execmd /c "echo YOU HAVE BEEN FUCKED BY FTSyxcal's RAT & timeout /t 10 & exit"2⤵PID:2788
-
C:\Windows\system32\timeout.exetimeout /t 103⤵PID:6632
-
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:6080
-
-
C:\Windows\system32\notepad.exenotepad2⤵PID:5700
-
-
C:\Windows\system32\calc.execalc2⤵
- Modifies registry class
PID:5328
-
-
C:\Windows\system32\mspaint.exemspaint2⤵
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:6592
-
-
C:\Program Files\Windows NT\Accessories\wordpad.exe"C:\Program Files\Windows NT\Accessories\wordpad.exe"2⤵
- Suspicious use of SetWindowsHookEx
PID:6232
-
-
C:\Windows\system32\SnippingTool.exesnippingtool2⤵
- System Network Configuration Discovery: Internet Connection Discovery
- Suspicious use of SetWindowsHookEx
PID:5792
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:5468
-
-
C:\Windows\system32\notepad.exenotepad2⤵PID:5620
-
-
C:\Windows\system32\calc.execalc2⤵
- Modifies registry class
PID:1564
-
-
C:\Windows\system32\mspaint.exemspaint2⤵
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:5760
-
-
C:\Program Files\Windows NT\Accessories\wordpad.exe"C:\Program Files\Windows NT\Accessories\wordpad.exe"2⤵
- Suspicious use of SetWindowsHookEx
PID:7064
-
-
C:\Windows\system32\SnippingTool.exesnippingtool2⤵PID:7532
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:7032
-
-
C:\Windows\system32\notepad.exenotepad2⤵PID:6788
-
-
C:\Windows\system32\calc.execalc2⤵PID:2316
-
-
C:\Windows\system32\mspaint.exemspaint2⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:5568
-
-
C:\Program Files\Windows NT\Accessories\wordpad.exe"C:\Program Files\Windows NT\Accessories\wordpad.exe"2⤵
- Suspicious use of SetWindowsHookEx
PID:6896
-
-
C:\Windows\system32\SnippingTool.exesnippingtool2⤵PID:6440
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:7076
-
-
C:\Windows\system32\notepad.exenotepad2⤵PID:7468
-
-
C:\Windows\system32\calc.execalc2⤵PID:7068
-
-
C:\Windows\system32\mspaint.exemspaint2⤵
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:7320
-
-
C:\Program Files\Windows NT\Accessories\wordpad.exe"C:\Program Files\Windows NT\Accessories\wordpad.exe"2⤵
- Suspicious use of SetWindowsHookEx
PID:6120
-
-
C:\Windows\system32\SnippingTool.exesnippingtool2⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:5840
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:7372
-
-
C:\Windows\system32\notepad.exenotepad2⤵PID:7884
-
-
C:\Windows\system32\calc.execalc2⤵
- Modifies registry class
PID:2576
-
-
C:\Windows\system32\mspaint.exemspaint2⤵
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:7456
-
-
C:\Program Files\Windows NT\Accessories\wordpad.exe"C:\Program Files\Windows NT\Accessories\wordpad.exe"2⤵
- Suspicious use of SetWindowsHookEx
PID:7616
-
-
C:\Windows\system32\SnippingTool.exesnippingtool2⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:7248
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:1836
-
-
C:\Windows\system32\notepad.exenotepad2⤵PID:7920
-
-
C:\Windows\system32\calc.execalc2⤵
- Modifies registry class
PID:7280
-
-
C:\Windows\system32\mspaint.exemspaint2⤵
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:7240
-
-
C:\Program Files\Windows NT\Accessories\wordpad.exe"C:\Program Files\Windows NT\Accessories\wordpad.exe"2⤵
- Suspicious use of SetWindowsHookEx
PID:7388
-
-
C:\Windows\system32\SnippingTool.exesnippingtool2⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:7716
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:8056
-
-
C:\Windows\system32\notepad.exenotepad2⤵PID:6312
-
-
C:\Windows\system32\calc.execalc2⤵PID:6736
-
-
C:\Windows\system32\mspaint.exemspaint2⤵
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:7980
-
-
C:\Program Files\Windows NT\Accessories\wordpad.exe"C:\Program Files\Windows NT\Accessories\wordpad.exe"2⤵
- Suspicious use of SetWindowsHookEx
PID:8176
-
-
C:\Windows\system32\SnippingTool.exesnippingtool2⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:7684
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:5636
-
-
C:\Windows\system32\notepad.exenotepad2⤵PID:8528
-
-
C:\Windows\system32\calc.execalc2⤵PID:8728
-
-
C:\Windows\system32\mspaint.exemspaint2⤵
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
PID:8156
-
-
C:\Program Files\Windows NT\Accessories\wordpad.exe"C:\Program Files\Windows NT\Accessories\wordpad.exe"2⤵PID:7208
-
-
C:\Windows\system32\SnippingTool.exesnippingtool2⤵PID:8568
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵
- Delays execution with timeout.exe
PID:6308
-
-
C:\Windows\system32\notepad.exenotepad2⤵PID:3980
-
-
C:\Windows\system32\calc.execalc2⤵
- Modifies registry class
PID:8212
-
-
C:\Windows\system32\mspaint.exemspaint2⤵
- Suspicious behavior: EnumeratesProcesses
PID:8220
-
-
C:\Program Files\Windows NT\Accessories\wordpad.exe"C:\Program Files\Windows NT\Accessories\wordpad.exe"2⤵PID:7740
-
-
C:\Windows\system32\SnippingTool.exesnippingtool2⤵PID:8060
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:412
-
-
C:\Windows\system32\notepad.exenotepad2⤵PID:8628
-
-
C:\Windows\system32\calc.execalc2⤵PID:9092
-
-
C:\Windows\system32\mspaint.exemspaint2⤵
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
PID:8200
-
-
C:\Program Files\Windows NT\Accessories\wordpad.exe"C:\Program Files\Windows NT\Accessories\wordpad.exe"2⤵PID:7732
-
-
C:\Windows\system32\SnippingTool.exesnippingtool2⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:8384
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:7416
-
-
C:\Windows\system32\notepad.exenotepad2⤵PID:8988
-
-
C:\Windows\system32\calc.execalc2⤵
- Modifies registry class
PID:7812
-
-
C:\Windows\system32\mspaint.exemspaint2⤵
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
PID:8820
-
-
C:\Program Files\Windows NT\Accessories\wordpad.exe"C:\Program Files\Windows NT\Accessories\wordpad.exe"2⤵PID:8940
-
-
C:\Windows\system32\SnippingTool.exesnippingtool2⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:8524
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:9016
-
-
C:\Windows\system32\notepad.exenotepad2⤵PID:8376
-
-
C:\Windows\system32\calc.execalc2⤵
- Modifies registry class
PID:8784
-
-
C:\Windows\system32\mspaint.exemspaint2⤵
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
PID:8800
-
-
C:\Program Files\Windows NT\Accessories\wordpad.exe"C:\Program Files\Windows NT\Accessories\wordpad.exe"2⤵PID:8932
-
-
C:\Windows\system32\SnippingTool.exesnippingtool2⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:8848
-
-
C:\Windows\system32\timeout.exetimeout /t 0.12⤵PID:8208
-
-
C:\Windows\system32\notepad.exenotepad2⤵PID:6268
-
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService1⤵PID:6856
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Suspicious use of SetWindowsHookEx
PID:4152
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Suspicious use of SetWindowsHookEx
PID:7480
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Suspicious use of SetWindowsHookEx
PID:6760
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Suspicious use of SetWindowsHookEx
PID:8012
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵PID:5852
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵PID:7988
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵PID:8396
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵PID:8480
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵PID:8492
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵PID:8520
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵PID:9132
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵PID:6720
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1KB
MD50af4d40167872d33aea118e4c64db7e3
SHA192c2eb0679d42ca9c6f89523575ed48607c187c6
SHA256c5218d0f700ce3f2aee5d0d6765125c4af1c77598392eaf457bbb9d2fa7ba25c
SHA512b30ff6d9ee893b15c24d472cc6b90552ffbb1f23a044f4cf45c661741a745446fb79b43067844a4cdaccd680f0331258f31ab13d30b406ae10f2f0e4781e0341
-
Filesize
3KB
MD580f694fe368414dccf7ec7853ca35abd
SHA1c3917d11ac045339e3f45e2d24ae3c5cbb1a69b6
SHA25602fbca266536bb0cf5b15bd7d4c9a8ed23919126bf43be5e66c1a639913a90da
SHA512617afb2825142c46d824f34c6982a578902332c07505a47636b963a032b15c858c2d218c700bfcc5c1087eaab2dc7f8ee7e557ece8b4c4f02d84442ffaad1521
-
Filesize
16KB
MD5571bba4395703660884c8aaa940cf971
SHA100fcdc00aa384254a07438754f88c679320a4dce
SHA2569738dc7cbcffbd009a909f0a46a0bc880de9c783eafd1f3bbc661e075f7c0841
SHA512e152a655f022a9da0cff7acd9eb22c8a75d874bade5dbe6e1849f2e2f1e73125d24af2257dafc15fd3ab446e2e6cb994970c17b3ca05c035d3e0443575e8be2d
-
Filesize
18KB
MD55c35e93500f25dd0ccc26d1d9af1da72
SHA1c0a69d251f784288a41944f31e27e40a895f973d
SHA256a1ef7ea0d3886062da637ff202fda6c58fa962b56373a20e47b7ba6e4aa53da2
SHA5127582816e0940a7136a8a559d28481f2f97a0b12f6517746a707038dc9e7e19285be470ac6707dac394d3456464f4d2ae62ecbd6d3d4ad8488d837a5819ab6a90
-
Filesize
19KB
MD549527bc73f9440abbe00040a2fd169fb
SHA1e6cb72600a95022f2e161ab25ea4b94e4805400f
SHA25698b4ffa920547a04ff079a3ef9396f1d0884340858e97a1fa30af60b50c78a9a
SHA5125244e7e41ac9eaaf43a08d6bc652ee166c6196708520c6afd2a252cacdbdb66b106a8badcf7443a45faba95afccc687bdd78b3bd799ce8a91bbc65e8cea903be
-
Filesize
21KB
MD5eaa4840e5be54ddf55dcad2dfb3d7078
SHA17906d77287a3ca8d75c2ccd8016831b0ac610acb
SHA25679af1ddd020829131209b6e2ead2607dafe1dfe7f9436e1ca5ab25247bdb6c9e
SHA512d6aac93b50edb67be881bbe02e228a5807a2b5e451fc4bfa215629c6b3a3704302a17dc62e526e1a5bb8009b51c0789797b965725d88c339b37f451121638abe
-
Filesize
22KB
MD56a8691ef3e448fc3c23509c0430fbec6
SHA12fbad109eb6faeb1806d736f691ab82a6121066d
SHA256a72805924b43e166f600ffaf3f815e8f5c91d644ab65fd62bd52051461ea07b5
SHA5129b715e33832f9c75499e20b12a4fa76461ee860cc063d050eb9fcc349107187e481acac8748c17f4b0c5d2be0c76c74fa89f9844a11dfa30017aadf347de6031
-
Filesize
24KB
MD5cc636b298bbec6c7f111a71772597c6e
SHA1abce26c0f12ec44843544089d312244989c9a7bd
SHA2564d63d5de3b8e59b9d409398d85db4d46e1d09131eb7876ac7932753cb55bcf84
SHA512dab49a933758209e27e2ebe882a6f75ccacc2389a4778d207b39d938e37195267ddf694ebf350bec1e030341114458349110a984f92d080c08ceb4f596bd4d87
-
Filesize
25KB
MD59e549788cd50e52321baf042ad4dbfe5
SHA1068c787b367e78562a3658b187cd7a3a10b27ed1
SHA2564733f9def3fbbafbdee5a4c080cf98941a009a814ad46d69aaf5dc260a333fe1
SHA512239d210b193938de26fba0931ec5c8ac597d1aa07ec92720f02ebda5b541e3be6d02958b96f964f409caca2fbfe0949f861243bb7492295384cd250bba603ebd
-
Filesize
27KB
MD5f67dd032293830146b69412faf5c96d1
SHA1946fb735cb25572f0c56eedbe3fa432ef8b5f499
SHA2566e5c687221e01eff4a86d6c5e0f91b4da95ecaae9333fdb1bbc9878978079f9d
SHA5123a9f42f8f8e66c3cd800402f202e8715fb94878c7882f0c6b5045c7a031d62fd53d4f4983735b192369d5142d3f173ea9a679f3025e5dc659790d5e4e77f28d2
-
Filesize
28KB
MD5426e1429d4c9644567954b8054238e35
SHA16c8c0a623256fdb3f400500856040895fc7f2965
SHA256aae5c5c6c28ab843bf7db31a9803dddeda68976063aee0713e9044045eaa2c62
SHA5127d48e9825d02e08ed32eb5be112f9c5a61b6c0b17105c45f247bf5357d756dae78bc06cffc196955eb9c79667dfa8e70af6c99bfe81f28515ed2f8f9d055d7fa
-
Filesize
30KB
MD5acc32fc19b37467fa59165c466595f57
SHA119ace230b97d8bd49f784335c32be9bf6402fd13
SHA256483a5ea9df44d649f7f8a3e38774b2f9129922f58eae2035b63119d897258d32
SHA51286f75383669aa3e0ba7e7081ad5c22dbce36ce9a01cd78cbbc83aed6dc6d127acd3dd048df38958bde792795f1dc9cdc6dbaf677fd4195c5207c7206dcec09f5
-
Filesize
4KB
MD5969c3d159c2a07d56e28ff3631599950
SHA1a6b093c8488e8ab9973e5f5dddb5e75a8c77f556
SHA256cf92b8694df73c59ce7e9b19477914febce3ce7385aaa90646c0b2a29a645b10
SHA51220535fe9c699725568a577f26c4a305dd183a3740a1b363740847c70c960a2d9625886e0b63bc175d38aa708c82c582ec7c15c3cf37c4626c9a8cb7773bac5c5
-
Filesize
32KB
MD5fd41e5fd8a2e1c29ffe543c7fe59f754
SHA103eff307c5535957092bbc45b314edf48a395b03
SHA256f3ab5b14acb5f44c2e4ff18f73fd34f19ea84d27e0f5b393ade4d1e38d76ce35
SHA512c12bb73b271b64f4f9bb15f885efd8927660b97acf1b0af586a9e896a25cf73ccb247167f6a498688d2281a884a8aa2d9aa21641ca14863a5669e3f265b65e15
-
Filesize
33KB
MD5e2dfc86803bfb875ab015588afcd32af
SHA14e7a0d7deacc410df3d7f950a4db526d8c2ce5cd
SHA25679c8055cb4c7952343c58ce1ab53feda52c8958c397d67f4805fb0c4d89b7dd4
SHA5126a8427d88f1d9020db6b04733038461f9749e7efce2d13e7f4ac5899289ab8c1250167a8612482ec84e56e5ecbd44ef8652c5fd310a5e18157bb4d5c700c6b0a
-
Filesize
35KB
MD561944dd1df87cb165e13dd97695b2bce
SHA174378289c7a12cc80fcca1503a89148edd22cc80
SHA2565987da40e569e99606f4222ad249f1bd098a35da817e793020c50a3fc557e1b0
SHA512a59a912684e81af4a9f0b37ba749f3632da679c87bd43b5543cc4f9356a67bc62a04733685dfdacf8d46f140ce6c85381bb057cee2fc99f4c989ca4d1bdaa8d1
-
Filesize
36KB
MD5170d86567a0306636bebfc32be02d187
SHA14f76cff538aac613915bad6001ba3bc7cfb8153c
SHA25658e6e5679f72f22496cabce17c1d8ba7ae73d5b957b3ea025afb5422443bf2d2
SHA5124f43a2752699c22761125d9076d8760a1be533f70b5603ae1aa68544c43984fedf4203e3a6774695237b21afd195f9ca07bef31f8bb47181733c8d6ce085d98d
-
Filesize
38KB
MD53eabaada2a45da66ad9b1f651ba6bbd0
SHA128329643e127c04958a32bb7e68821b571082e1e
SHA256bdf8addcb49f6e2efbd497f5e38284d904a5e7c4d7814bd5fa4b60e06933053f
SHA5123726ef372f059bfefe01260c1b55578bda8e12948fac1e9c58ef6f497f1741f9b029ea065923189a257d23bbfab20e11686ec0689203bd62903c54ba8e74a75b
-
Filesize
39KB
MD563f162e0dce63694ec59e287b6e28a86
SHA14565ac205d10a178ec2929c65565297d8fc6296d
SHA25601734fd626bc7c5c97c69fc0a1330934696ffcf202a31f9ec4407bfcf45e4621
SHA512080ed4f5de51bb88bcead32025d61e07b52ed572248af8d2f692c3d89a1f4a9dc3180e13495ba0ab66cf1b97fc205e7d5d2a2aa1b883ae295e11d1c8c6b01d2a
-
Filesize
41KB
MD5bb26b6d28fbe03219e7c4cde8565a37f
SHA1c116005acbdb82b238cd3ae00db709d021b31d53
SHA2569d20686f7d782ffbf36a399f9d8a1084534eebc0913c6d0a27e5b4d89767b39c
SHA512425e5df7ef9c82022d43f03107bf26bacf46dd50acad2677a0e606e8df20099363372ed00b88cea9fcb440258013d920f72a47ee4632b3e3134b2ff07f01f1fc
-
Filesize
42KB
MD5c8ff464f9cfcf3dd6f0da3d7ca03db5f
SHA14ffe5c55086b96a4d789b329726d04da46722c17
SHA256c4fbd1b34e369e97e5b1d7756b202ff22abf8c835658c2ac958af8449512842c
SHA51229b6d43abd1541028f5691ae7970d328ed7c5b3271dfde67e49a3827776bf0583f9c74b5a1d5bf7643dd45e0ca2fd22f4a4e66266239dbd3ae5b6c93e818072c
-
Filesize
44KB
MD5c1869492212b654868dc570d2d442f81
SHA1c3ede7194b2e2f685384b35570259b189f3e184f
SHA2564d8d790b4f0a8116635ca9e4e433c75b99cd63ac1d8331277ec7a2cbc302ddb6
SHA512a44681a449bf269860215942bc1c44370e049f8dfa0a3ee928259c8b0464f34b97c7303eb246fca508878233378f23878085dae0d72e1282f3d043b49694ef94
-
Filesize
45KB
MD5e1d2b6ea76e8161b9019bfc99c9f85e7
SHA1ba5e6b706ed457514fa8ad9644f0f58b7bb157bc
SHA256e3517a25efa0fd0ab171931daee901464245eeb3b755b060d619d763f5325818
SHA512ccde14cee2c4275c3f999d2ae72004ad99bbede40269b35a50f6e729e3e7ae1345948b02ac1809977891746fba31ad726ca2f36815d05f0700fe6f5ce596bea4
-
Filesize
6KB
MD5386fc69babb3b94bd7f463e4c4df0329
SHA1f8a8fa38fdac04854a37137864a57d96fa576c6b
SHA25667723e7551347e360c9119e3104443b1ee9f824eb14a0247d792321a2401aaf7
SHA512038601d60ea1f03886a122734a849e543033e9d58beccd1945b7a1b0b0e3db989c0d61f8ac9d73330fa67172c1ff6d73079de1f288abcbbdafc0a120258e39ee
-
Filesize
47KB
MD589ee0c78adc30abf7760acfa1c06315c
SHA1296a32270c955b1ee7b6630c2295ba441533c3ab
SHA2564f0f5b466f8b655e0d053451239e6e52d53a3b877ff35f1d42b3fdd89d5763cb
SHA512e0f5ee05dec7f3faf3b294eddc22e7495ee5e7e676b9b0fe05ee90828677266bbbb5648c08713b17bc4fd3358239df88596aa86c6b01121598fc039e30b5d5ac
-
Filesize
48KB
MD53bbb80b0335e85be26554b9100844945
SHA1fad8dc89b003890eafcedd1f373981cbf0d339ec
SHA25609102e0b83432b9825ee73c7c63899ef2726c2806e704ba25bc91f2bfc2b48a7
SHA5126eb72d3aae16661b78004a56d9ad51691a46d9c8c5ffb69b50ebf95c4f7533ae64b7cd117502dcf1b0fb4ca3fc1c0798dc80ea1cd121b9355ca1105268a20f57
-
Filesize
50KB
MD5e2a65cbb4cc53ee59796edcb52fb512d
SHA17665da2c737b4416aa62895799095e63c4b3ec5e
SHA256955a7b00e875fe1e95797cfd7a9ac0f3408240871b4607b82170c030e4254844
SHA512ed3b6f250a838f62d4e9d3b2746164071feb271c277cadd5bebd76d66aaa8c64e8fc28cfed47d7471e774a56bb5ea1b341b6814db7bdcfa3cbb7d90da7aa8007
-
Filesize
51KB
MD5835013663fd6ddf8b7ba562196030881
SHA18426ddc468357453ee06845bbb63a1007494b82f
SHA256b39b1505980391ad5a57590a1ea282a057ac88582621683c1a7f16efd615549d
SHA51295dbec3c316bd82b6d5fda17aa7e0d797716a867dfc214a469862a9dcf7a851c2b22eb88b059d3a91d932ac8612d4de479e80118e7e06ebdf6f688ee0a27a5bb
-
Filesize
53KB
MD505199288663d593f411ae0a166cfc590
SHA1f7514a7f0887de00218b2024d75f32a89816a644
SHA256c91d87eadfc17ae5d4a9de49ae34fdc118f2b3bee1d55a1ef8156ee93fe996b1
SHA51210aca34793455b35b6bdbc23b749db9205bc634c0366439e61169608c491d2db4605e8c7446975835679a4e3b66314d3cd6d8eae53021794a68873e5802833d3
-
Filesize
54KB
MD5169f90564d68373dd5b4d3048d5eb7d7
SHA17cb6c3c03ee109995b84e19352204cb4a0ddb95e
SHA2567add6ff9486cbb72dcc292cf33d3139b220a44def9e151960acd39151ff5a3dd
SHA5120c6b86ac5b5fa587ad699a1124fadd9cc7bfc5e7eb8f518547c54f2e872313d37a785b603ecc412e644ded01a821a870df2bd4979e98b8db97bb2cecea915910
-
Filesize
56KB
MD502d369d344006ca6bc30c78f1f4f5f8c
SHA10d085737cd69f828d97e58f4ed58d46665738dd5
SHA256fcd98d616821faf4a7c5d39d745a7e2bc3f86e61fb326c58678e2930e5eb8198
SHA5122cc86f3d2971bd3fdb325803b91864bb032a321db74680b3c6a911b9a4d503673155270fedf51f559a45dbd3c83c9d049cc5184206e1e0ac8057e627fef968b4
-
Filesize
57KB
MD52b331ee2d43b1564d148dcc4fe184a83
SHA17c8ca908c9481f1b969fa19d7f59d1e0605397a5
SHA256b8679fcef2b870227c5daace5980c46a46a8a4b34931370d1b67fba1a6518999
SHA512b89636d368aee45eea9c9fdf986cfd77ba53b3328c5f1d54c6b7b70606cf1f73538bd28c2a23a53743d6b026f8a0d68297f4fd25881072ac0aab91dfbe71fe06
-
Filesize
59KB
MD57cfd281e6962b61567cb86e802b69ede
SHA1a3120f4b4bc89df10b373587551d9aabf6b9bf99
SHA256004dde2e902f145677f6da6d589afbcdf6ec1e7e30cf4ea4b8bd89df2f215e1a
SHA51276f4122acd9b2259e7af886c9aa62e0fbbf2338d5d7ae5a1e425673779d59b06712dc0b55e4ef10d3d0f8c4ed27db09ca1d6502aacfb5de6786764db93038ecf
-
Filesize
60KB
MD566aa8aaeb86c7c257edd2be3f24d8ae6
SHA13917148edf36ed0060e6bebe3bd5c0a35688bef2
SHA2569d266c96a413e4b9f3681c7844c46d4955da6a2cea2b6a8de78bb9d5d5ecc3a5
SHA512870962d2e6211035f4ae0a61462c9ba5b8e023544cdc18556acabfa1eace1eeac6391990c646705096409ab2bb87dcfc7febb48327e0b25af64ff2c78790ffed
-
Filesize
7KB
MD5110fd2c22cf34d2bc6d6de547d6c3cc1
SHA1f1258b62349a36c4d9fd46495dfd11d5b5921e0b
SHA256c333061b0259e65ed06d45f32cc5f76b2136e32120bf5437e38db1fcb65ed72b
SHA5121a53eff8b96a1c0336bd7a1d83daed833be8a20c6509e0b7c0e9e7bbecbe4b906c5d0fdbdb35f3d1bb0d249bca46890e93ab6e0eb6b86bc73bb1ed042644d04c
-
Filesize
62KB
MD59909dc9ff22b16198fe27747360a9907
SHA15bafc90057e681cf450182d0a509a689da6b9b73
SHA25635be9667a2e89b6d7bff08dc9d093ad5ba93545ddff4f0c03e55a0f589ed6878
SHA512a77947334a63b57014c972701de34278bdf1c866206100da9f287f9eca0cb9a5a93fd76523a78ff1687272fcc7e7817112d4aa9a5a275a735a3234738624f294
-
Filesize
64KB
MD5502672cd76dd9e9ed2adf47fe02149aa
SHA1b077112c935ae1ce3dbb922fe1069848e7abdef3
SHA25641c92ad0b9ea0a46f4760379ead3468a322a991907140ad6d5ee3af1a9ecd97c
SHA512d272b87854ca6e8d990e15ac2818fcf8f498192fdf3ccf40ce8b449842e68a89c580afc4f088ffd96c59ef112bc62844f996ffcf1206d2b7cb28c436f11c7a0e
-
Filesize
65KB
MD5fea2b5498c0d400f6fdd90c628b78af8
SHA152f7dbb27812717b7cd9587d3a6bca700456db0e
SHA2569279413a43de67b901cb4320104a6221a75fbf6e9b948c9b68e2ac643ee361ba
SHA5127ce26ae01d1d476d159adc31e9090f467ffc6c69bcf20083f560fd7a94010adbfcd6e6388d3c1d741f103ca280c1408ca0366d3b4f0a1a771c2c7201d2b88c32
-
Filesize
67KB
MD5decca16babde215370189d6560473ae6
SHA16ba6dd407bad502e052033a47c3c9e77507bb411
SHA256a208ef38eb3cfb93bc0804df2ffa4345c6e58102cbb36da2fb326cad026a3102
SHA51219ed468e8852ddb3d9ede8c4e8862d649b9d6a9b0064b4dfde35d8ee5b122ff4ff64252cb4a0270c60009460c19b805286a8a583dd0c56e53e89bab31b664e00
-
Filesize
68KB
MD593ad3e5d5399b1d696cd03033d6ea437
SHA180030d2cb19fa2bfa557c5f155cd299ca1972f61
SHA256aefa207bbd2eee65d6d6420af291f5929a255acf96841281e72eff9c9f8f4602
SHA512aad440f71f8d2ee18cbe8da9fa670fc4bfa3a84ecf6d293d0ec77765455296c64933c4c1d1f882638ff048519335460960dc06bc9830c2c379db71bce47cf0ba
-
Filesize
70KB
MD55dd913b1d62ee8bc51a3c1b2f725d135
SHA16b7f41b840c789b160967bb2201c2b349c59e524
SHA2563f60f985b3970e9b5014b638a6b5126695cea42e08b155824902272cbfdb9d5c
SHA5124b439b549f8f7485bd1f02d2a8d8179e7503f9ad8312392d47e42c9a407114a8933159ac7b7b929782c3ed989d95f2768e4c195ca465e12c42ac1693f4a89ede
-
Filesize
71KB
MD5d17646e62e7a49e25e4a31500f1a9c58
SHA1181feeace36244bab6fcad3872841ab4f206e5a0
SHA256749810ce53397ceb1204183143dc56723bbbf9ddad19cf76acb858b488ab3256
SHA512eec6724d92f3f6f6595f5d4b22cf955d2f2b5779febd23b863805c89040db5a123f30e6f8ab377a4db9680f7be14660ad27ee874ea0ed0181ac8b85ba4598a73
-
Filesize
73KB
MD5366d99dc45335550ff2b0157a4d47bd4
SHA140da115eb7a246721f4d617f5ed51cd48310392a
SHA256cbd4db7a7df125a869ac429ae599b2c6220035a9e1a208561ae8709b6b815b0d
SHA5120fb736853df104db45705d4d5cee5d8e45462a882ac32b1b17eae14963ccf4a8c4592b6755f2666e90a4b3130addfc0771520ec8a4e75141a3e42be66b3047a3
-
Filesize
74KB
MD51b088f0a9280ede26418c5f610007c29
SHA19a84d433bdf968d0ab08fadcbd77d12293e5cb38
SHA2568a33fc810177180a84435b818a711a3a80d7af8d2466a2063aa77f6bef067433
SHA51264c1436c234e4320c4dad885114db7ed73b164941fff496c609f91c2ed456d03bf827df570908a6ba69b4f270f9653e6547d3aca228a8e396cacd55d49422ed0
-
Filesize
76KB
MD5d1c65c3a7b65fbdf42bba0b2ec3fe658
SHA1a2320cb03716de07a9bd8c0d8f3b9697f6d93d68
SHA256c95b6714816b2508cb2e167c695f1c41f4c86c78220f4d96d3cdfeafdba7d640
SHA512da6baedea3eac3b1feecc35b84ce799091c5b7efe41cced896ba4464a203310b262ada81a46e71c176cf676a95a702c89e64fe0c67b7048548f75e933714e1e0
-
Filesize
9KB
MD5a03f53c63f92192658a39136ff63b443
SHA1e121a32cbc943e4eb9f35cadcbed097b4a53e3ed
SHA256d4f0b301f5c0876bd15cf95f42228486b2b73a0b9ee9f5d2f3e63698659c515e
SHA512cda8edc1c682767ad0d027558d4dce0d0fa5331837192d0e1aa4a7971b7ff0c75aa2c16911b26631646d4212a2156be08b59b890a5dad133b40c02f9f1408427
-
Filesize
77KB
MD5af05daa7ba6d8887e0d9f80db28d640e
SHA1452913f183758d44d0327b9c03caa86da4d50784
SHA25670178a4fedaa1cae9da2d9e51eff19e46f5e023433288660ae889c60aa82e16f
SHA512fedadfc76438968811fa52d692044e555590df612d93cde75dd1b31372544e514712780e8e796816e1407d1564b9410eb483d262892be6595f655e4f9222a16f
-
Filesize
79KB
MD59fef9dcbf5d1ae02fbf1ecd1e9c61fc7
SHA123da2a209ae3e39efc4f7a5914b401b1c2cd4c33
SHA256af98d6daa4031bd00a6bcfb8f46757a0b89e3a10f84f9ae6586db54f39215e61
SHA512b9eec9e959d7e7fa824f7022268b90065ace94ea582a8a377445376edc9ab9224e4a51b887f1a70c98fc8210ece0180f68927f58841bd2ea1bd2d0aa320a4d62
-
Filesize
80KB
MD5ab1572335f2cda1eb03888c6351a3abb
SHA1f0bffbacee7c24372c0dc870a7cbf2c03defefb9
SHA25612f33863a3a85ae7a0dcf417bafabb6c102cde7ab58b879776d5e84c8866137f
SHA5125803283e3356ea55f2fc8ca2371831dd3a261c74eed3a3c55d13ec4a8613f0702659e5569603e2fec3e7720592c0ace5eb106fed5410704379c0b84c9cc0b2ae
-
Filesize
82KB
MD51efe433b0ddf831c3b7c08001f988d3a
SHA1f0077997f66e8940bc09c2669d0174c76c63beaf
SHA2567ed82149e59d4cc14faae1253d1973af35773bb665e7b08b2e15f8f6a4574737
SHA5127eefff4e513de6d40eb7a507db4b9e402227b38272c8e1af0b48a298320d610dba50f23689d3e7e3ac8e7d29954911536119d7486d3a61d47f604173fd7a7f28
-
Filesize
83KB
MD5e3e42fbed419fe204203a709b10b54c0
SHA122cc970205032ba1b86ebb3fb61451a27b2c8534
SHA256b00bfcdb0e91ce1008a5ca118805d03787e8b988e26e472f33f9ba847beaaa73
SHA512bc5c5d4ef1ff305c994d9a2dd31d9b45a59484f73d8c4121835c8212294e935ede00e0c0575a31d6268b02cff56faf4b6c5a96adcc24bcca41942286c16a5aa3
-
Filesize
85KB
MD5645bd73345fc540d2905066279341e5a
SHA165b0909611382a729546c943feefd7f85f724c1a
SHA25667d6fb0ad9209889c53a10ca5d13db2df6ec64ee10fd917c0eb159956e97b711
SHA5128d37521ecc356e59b3f13c2c1792afbe5adad2da1e3a2699f56e2e647cca80b6f8316c798cb70ce57c537c098afeaf7a203af24e16434479aee812e343cdae91
-
Filesize
86KB
MD548d7e2940af40fc8fe47aeb58dec3a1b
SHA11da521cf0eeb9645648294eb4e8aa6ab33df39fb
SHA2567ef60724fab500d1ef0928c6228daa7748cc5e89b2be4a99169be82cec53fd72
SHA51228f02fa648851543b4a2da4afb67ed2891281e5bee0db836d2a424a927d8459a4d7f225140c5c13d6c573ae6ba2d23bf3df735471cc2ad049d705e29e464295e
-
Filesize
88KB
MD5ad0cb6aa86ff8cf3e0df38ffa89f366a
SHA15d6f3835cd9e5d68423fbed9dfb05548e358612c
SHA25624c8efaa3d915f482454ec18e2ae4fb4fa3bd585d1ef3927cf29d6748430bcde
SHA5122265fe6c180972d6262de206b601500dfd485d26ad5192386fb1584c0179b4359d9f77fbf9686df3042a0d53949a75dfe2746a187798d840e7fabb3173bba7ac
-
Filesize
89KB
MD5e100e9384a7492482952a6edf084d966
SHA144385a9f0b87a6855e7dfa7316cf583abeda2b87
SHA2565c67cc4512cf6aee5cc9ae5f3191295a3fd45dab40d536839c44cfde084fbb8f
SHA5122be479ca309adfe7610fbef54b4fa8beb2b3097307f0f810dc4737be08afc49c58dff90c2c7bbd6ba51c1c54e1d67f2b2e9d023207f3c8455c03475d9855837b
-
Filesize
91KB
MD5265c06b351b1b9b65b186cc3adb6aa1e
SHA1b01d8b39f69e6cf7d2e72bc744e895cbf81278d5
SHA256dd0768697b16a3b3ffd0c5370c4ce3675b52d223f40f26e42a86df8fe31fa9c8
SHA5128c4983e0e71ffef037575ae02e1f4840e8f4c84ecc6174214b297c597cdc4d8d4e32cd9541c2a85a789ba490884a869917517e41540bce1a85ee937e54876ab2
-
Filesize
10KB
MD58f105eaf89c4e0f311a9603af66bd454
SHA1dca71c318f6310ea6557593c499b518e23208b96
SHA256afbb41827c04c2e1af96b5636b90abc932f07aaf53c6c491e9d0f30f3011b7f4
SHA5126824b6b14d5fcca7ddf16eed7aa6cf071698b59c20f79248b86534afc9bb0770b0c6f1612c0fc9bc1b60fcd6866a6b4640d7e522009914d4d0e9b01ebe497cda
-
Filesize
92KB
MD5bb2737d51154a768b7615aa802c82a97
SHA19b70a6ecdf7e7b2eaa6ff8f899a059a1145f79a1
SHA256120a512e30307af8f40174b2aa5228eeea9ba251058eb786de8d568ea6dee5f0
SHA5120c07d68475a02fd1bf088beb0987bade4ec21878a40d10cb5fd1eea9e41c52f431c3604ee90ed063bb05039661d9c7bdb4dd5593b79cab4fe78c326a81a379eb
-
Filesize
94KB
MD577c54da92f4591a6ba056287f68aa721
SHA1c83a1124d3ec1c1d4e9639fa3bdfe2ae93a727fe
SHA25619bc914c94ba27b7d2e673887cab8d042ec7b534d83f6b9dfb15828d00a3777e
SHA512c7ded7b099f1afa61f56e6e3ebffaa313731aa2940d980006d291c677338f57837447a00f2397dc430295b4034db16a734f9da57060281c5a3cc8b9009935ec6
-
Filesize
95KB
MD543fb12286695992fcab7ca9460d9dc0c
SHA15f54b4bab0429962e11890b169ed91d6257674a0
SHA256101e2162d305c250de92ce4eadb24da5227334da93f61aa62a7a52a2ae3dbb97
SHA512803da479015d497d390f1aeb2a2bd63b5c476167d03b867f36d4281ced7fcd47beba1f35f1030ce71034ce50dfb5bef4c986c966bf65c532bcd36dcf104b9e47
-
Filesize
97KB
MD50d44c7cf7007d6dc60f05dec3daf90f4
SHA15a49e892eb78929e3207fd3283952ccddd2f89ed
SHA256649394aee9b7eb8ef25ed61d2cc2362a3e0c22050c1ea5a21f028d872938b2f7
SHA512abe40c871f5483351d8ca79085828e9710e03bdc82e2b42c0e84bde676eb297a0ea28a23a939430ace995a6da9278239545ffc8c24dadc58470046560b3457b8
-
Filesize
12KB
MD56224938aacff677822642e77926094fb
SHA1674c8d2e9f72a72d90b8a6ea51606a249b3e91bb
SHA2564a208ab873f38a175ba3add70390a0811ed2ad9e8f1c633f9bcf0340fe19b32d
SHA512e368f793a66adc206b90f4e3b3579a64c796784be04976db738ac618ba9c494b8642bc414ee7ed0d3bcbd50010d7cb346b205cc264c6806786713daffbc7d167
-
Filesize
13KB
MD5b16261a7cb9f30cf1d867fbdf527d6b6
SHA16a88e117711b6fbc12ed590063e422e405bf147a
SHA25670d48aa0b129779f8c79652225234f5c53d5e32f45d3ebc425135ae8d39d5da1
SHA51283e930737a74d1d2b3a01d28a360d1a21b613a8e0e44fc0780d44f991a68922765fef70ac4421572e51a4589ca12f96aa15dd12b737dee4adb995b915b4b9a66
-
Filesize
15KB
MD548d3a89bfe335a9bda49414b1d547332
SHA1b54fbc03efe50434511c4aedda65b0cc90df8959
SHA2567f982f05cbff0011cac744a92c65ced3cc83184fa6a754ef19c794bedd73ef03
SHA512485d93e14d170e814e9c013a1829ea66c0a808b8c796ed9ac83602f945bb7e70b87308958f5f0342c56132b8d1a83b025b581806df7978628bc03be4b17ccb94