Analysis
-
max time kernel
150s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20250410-en -
resource tags
-
submitted
14/04/2025, 15:04
General
-
Target
activsky.exe
-
Size
1.3MB
-
MD5
6ae22628035c2a1876b004ecd790fb71
-
SHA1
7a5fa1a07f8618b53c9f82b2dab9b776aebc28a7
-
SHA256
43181188b83edadb44e2b8e3c68712031dbe0e74f5842eb13165479e0a6b5be2
-
SHA512
5fac40cd6c31bf77898db633e1b15193da0ecc5f34c0b473396fa6d1cfd4683c37738b4c1d45333b039dd1efe4fca2c1e57693d0cc65d10db735289b5ce64948
-
SSDEEP
24576:0njz8owghhbbR4EdchKOCF2tEgXHKOYsuM3WBA0XGDXd+DxR5R8a6:0j/zt4EdWKn2nNYsuMuALDXuxnN6
Score
10/10
Malware Config
Signatures
-
ISR Stealer
ISR Stealer is a modified version of Hackhound Stealer written in visual basic.
-
ISR Stealer payload 2 IoCs
-
Isrstealer family
-
Detected Nirsoft tools 44 IoCs
Free utilities often used by attackers which can steal passwords, product keys, etc.
-
NirSoft MailPassView 19 IoCs
Password recovery tool for various email clients
-
NirSoft WebBrowserPassView 3 IoCs
Password recovery tool for various web browsers
-
Checks computer location settings 2 TTPs 2 IoCs
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE 2 IoCs
-
AutoIT Executable 55 IoCs
AutoIT scripts compiled to PE executables.
-
UPX packed file 64 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Program crash 4 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 5 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of WriteProcessMemory 12 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\activsky.exe"C:\Users\Admin\AppData\Local\Temp\activsky.exe"1⤵
- Checks computer location settings
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\activsky.exe"C:\Users\Admin\AppData\Local\Temp\activsky.exe"2⤵
- Checks computer location settings
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\activsky.exe"C:\Users\Admin\AppData\Local\Temp\activsky.exe"3⤵
- System Location Discovery: System Language Discovery
-
C:\Users\Admin\AppData\Local\Temp\activsky.exe"C:\Users\Admin\AppData\Local\Temp\activsky.exe"4⤵
-
C:\Users\Admin\AppData\Local\Temp\activsky.exe"C:\Users\Admin\AppData\Local\Temp\activsky.exe"5⤵
-
C:\Users\Admin\AppData\Local\Temp\activsky.exe"C:\Users\Admin\AppData\Local\Temp\activsky.exe"6⤵
-
C:\Users\Admin\AppData\Local\Temp\activsky.exe"C:\Users\Admin\AppData\Local\Temp\activsky.exe"7⤵
-
C:\Users\Admin\AppData\Local\Temp\activsky.exe"C:\Users\Admin\AppData\Local\Temp\activsky.exe"8⤵
-
C:\Users\Admin\AppData\Local\Temp\activsky.exe"C:\Users\Admin\AppData\Local\Temp\activsky.exe"9⤵
-
C:\Users\Admin\AppData\Local\Temp\activsky.exe"C:\Users\Admin\AppData\Local\Temp\activsky.exe"10⤵
-
C:\Users\Admin\AppData\Local\Temp\activsky.exe"C:\Users\Admin\AppData\Local\Temp\activsky.exe"11⤵
-
C:\Users\Admin\AppData\Local\Temp\activsky.exe"C:\Users\Admin\AppData\Local\Temp\activsky.exe"12⤵
-
C:\Users\Admin\AppData\Local\Temp\activsky.exe"C:\Users\Admin\AppData\Local\Temp\activsky.exe"13⤵
-
C:\Users\Admin\AppData\Local\Temp\activsky.exe"C:\Users\Admin\AppData\Local\Temp\activsky.exe"14⤵
-
C:\Users\Admin\AppData\Local\Temp\activsky.exe"C:\Users\Admin\AppData\Local\Temp\activsky.exe"15⤵
-
C:\Users\Admin\AppData\Local\Temp\activsky.exe"C:\Users\Admin\AppData\Local\Temp\activsky.exe"16⤵
-
C:\Users\Admin\AppData\Local\Temp\activsky.exe"C:\Users\Admin\AppData\Local\Temp\activsky.exe"17⤵
-
C:\Users\Admin\AppData\Local\Temp\activsky.exe"C:\Users\Admin\AppData\Local\Temp\activsky.exe"18⤵
-
C:\Users\Admin\AppData\Local\Temp\activsky.exe"C:\Users\Admin\AppData\Local\Temp\activsky.exe"19⤵
-
C:\Users\Admin\AppData\Local\Temp\activsky.exe"C:\Users\Admin\AppData\Local\Temp\activsky.exe"20⤵
-
C:\Users\Admin\AppData\Local\Temp\activsky.exe"C:\Users\Admin\AppData\Local\Temp\activsky.exe"21⤵
-
C:\Users\Admin\AppData\Local\Temp\activsky.exe"C:\Users\Admin\AppData\Local\Temp\activsky.exe"22⤵
-
C:\Users\Admin\AppData\Local\Temp\activsky.exe"C:\Users\Admin\AppData\Local\Temp\activsky.exe"23⤵
-
C:\Users\Admin\AppData\Local\Temp\activsky.exe"C:\Users\Admin\AppData\Local\Temp\activsky.exe"24⤵
-
C:\Users\Admin\AppData\Local\Temp\activsky.exe"C:\Users\Admin\AppData\Local\Temp\activsky.exe"25⤵
-
C:\Users\Admin\AppData\Local\Temp\activsky.exe"C:\Users\Admin\AppData\Local\Temp\activsky.exe"26⤵
-
C:\Users\Admin\AppData\Local\Temp\activsky.exe"C:\Users\Admin\AppData\Local\Temp\activsky.exe"27⤵
-
C:\Users\Admin\AppData\Local\Temp\activsky.exe"C:\Users\Admin\AppData\Local\Temp\activsky.exe"28⤵
-
C:\Users\Admin\AppData\Local\Temp\activsky.exe"C:\Users\Admin\AppData\Local\Temp\activsky.exe"29⤵
-
C:\Users\Admin\AppData\Local\Temp\activsky.exe"C:\Users\Admin\AppData\Local\Temp\activsky.exe"30⤵
-
C:\Users\Admin\AppData\Local\Temp\activsky.exe"C:\Users\Admin\AppData\Local\Temp\activsky.exe"31⤵
-
C:\Users\Admin\AppData\Local\Temp\activsky.exe"C:\Users\Admin\AppData\Local\Temp\activsky.exe"32⤵
-
C:\Users\Admin\AppData\Local\Temp\activsky.exe"C:\Users\Admin\AppData\Local\Temp\activsky.exe"33⤵
-
C:\Users\Admin\AppData\Local\Temp\activsky.exe"C:\Users\Admin\AppData\Local\Temp\activsky.exe"34⤵
-
C:\Users\Admin\AppData\Local\Temp\activsky.exe"C:\Users\Admin\AppData\Local\Temp\activsky.exe"35⤵
-
C:\Users\Admin\AppData\Local\Temp\activsky.exe"C:\Users\Admin\AppData\Local\Temp\activsky.exe"36⤵
-
C:\Users\Admin\AppData\Local\Temp\activsky.exe"C:\Users\Admin\AppData\Local\Temp\activsky.exe"37⤵
-
C:\Users\Admin\AppData\Local\Temp\activsky.exe"C:\Users\Admin\AppData\Local\Temp\activsky.exe"38⤵
-
C:\Users\Admin\AppData\Local\Temp\activsky.exe"C:\Users\Admin\AppData\Local\Temp\activsky.exe"39⤵
-
C:\Users\Admin\AppData\Local\Temp\activsky.exe"C:\Users\Admin\AppData\Local\Temp\activsky.exe"40⤵
-
C:\Users\Admin\AppData\Local\Temp\activsky.exe"C:\Users\Admin\AppData\Local\Temp\activsky.exe"41⤵
-
C:\Users\Admin\AppData\Local\Temp\activsky.exe"C:\Users\Admin\AppData\Local\Temp\activsky.exe"42⤵
-
C:\Users\Admin\AppData\Local\Temp\activsky.exe"C:\Users\Admin\AppData\Local\Temp\activsky.exe"43⤵
-
C:\Users\Admin\AppData\Local\Temp\activsky.exe"C:\Users\Admin\AppData\Local\Temp\activsky.exe"44⤵
-
C:\Users\Admin\AppData\Local\Temp\activsky.exe"C:\Users\Admin\AppData\Local\Temp\activsky.exe"45⤵
-
-
C:\Users\Admin\AppData\Local\Temp\fuck.exe"C:\Users\Admin\AppData\Local\Temp\fuck.exe"45⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\fuck.exe"C:\Users\Admin\AppData\Local\Temp\fuck.exe"44⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\fuck.exe"C:\Users\Admin\AppData\Local\Temp\fuck.exe"43⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\fuck.exe"C:\Users\Admin\AppData\Local\Temp\fuck.exe"42⤵
-
-
-
C:\Users\Admin\AppData\Local\Temp\fuck.exe"C:\Users\Admin\AppData\Local\Temp\fuck.exe"41⤵
-
C:\Users\Admin\AppData\Roaming\14345fuck.exeC:\Users\Admin\AppData\Roaming\14345fuck.exe42⤵
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Tempscratch.cmd42⤵
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\fuck.exe"C:\Users\Admin\AppData\Local\Temp\fuck.exe"40⤵
-
C:\Users\Admin\AppData\Roaming\98656fuck.exeC:\Users\Admin\AppData\Roaming\98656fuck.exe41⤵
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Tempscratch.cmd41⤵
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\fuck.exe"C:\Users\Admin\AppData\Local\Temp\fuck.exe"39⤵
-
C:\Users\Admin\AppData\Roaming\40330fuck.exeC:\Users\Admin\AppData\Roaming\40330fuck.exe40⤵
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Tempscratch.cmd40⤵
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\fuck.exe"C:\Users\Admin\AppData\Local\Temp\fuck.exe"38⤵
-
C:\Users\Admin\AppData\Roaming\94167fuck.exeC:\Users\Admin\AppData\Roaming\94167fuck.exe39⤵
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Tempscratch.cmd39⤵
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\fuck.exe"C:\Users\Admin\AppData\Local\Temp\fuck.exe"37⤵
-
C:\Users\Admin\AppData\Roaming\58226fuck.exeC:\Users\Admin\AppData\Roaming\58226fuck.exe38⤵
-
C:\Users\Admin\AppData\Roaming\58226fuck.exe"C:\Users\Admin\AppData\Roaming\58226fuck.exe"39⤵
-
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Tempscratch.cmd38⤵
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\fuck.exe"C:\Users\Admin\AppData\Local\Temp\fuck.exe"36⤵
-
C:\Users\Admin\AppData\Roaming\53180fuck.exeC:\Users\Admin\AppData\Roaming\53180fuck.exe37⤵
-
C:\Users\Admin\AppData\Roaming\53180fuck.exe"C:\Users\Admin\AppData\Roaming\53180fuck.exe"38⤵
-
C:\Users\Admin\AppData\Roaming\53180fuck.exe"C:\Users\Admin\AppData\Roaming\53180fuck.exe"39⤵
-
C:\Users\Admin\AppData\Roaming\53180fuck.exe"C:\Users\Admin\AppData\Roaming\53180fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp40⤵
-
-
C:\Users\Admin\AppData\Roaming\53180fuck.exe"C:\Users\Admin\AppData\Roaming\53180fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp40⤵
-
-
C:\Users\Admin\AppData\Roaming\53180fuck.exe"C:\Users\Admin\AppData\Roaming\53180fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp40⤵
-
-
-
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Tempscratch.cmd37⤵
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\fuck.exe"C:\Users\Admin\AppData\Local\Temp\fuck.exe"35⤵
-
C:\Users\Admin\AppData\Roaming\92981fuck.exeC:\Users\Admin\AppData\Roaming\92981fuck.exe36⤵
-
C:\Users\Admin\AppData\Roaming\92981fuck.exe"C:\Users\Admin\AppData\Roaming\92981fuck.exe"37⤵
-
C:\Users\Admin\AppData\Roaming\92981fuck.exe"C:\Users\Admin\AppData\Roaming\92981fuck.exe"38⤵
-
C:\Users\Admin\AppData\Roaming\92981fuck.exe"C:\Users\Admin\AppData\Roaming\92981fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp39⤵
-
-
C:\Users\Admin\AppData\Roaming\92981fuck.exe"C:\Users\Admin\AppData\Roaming\92981fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp39⤵
-
-
C:\Users\Admin\AppData\Roaming\92981fuck.exe"C:\Users\Admin\AppData\Roaming\92981fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp39⤵
-
-
-
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Tempscratch.cmd36⤵
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\fuck.exe"C:\Users\Admin\AppData\Local\Temp\fuck.exe"34⤵
-
C:\Users\Admin\AppData\Roaming\62884fuck.exeC:\Users\Admin\AppData\Roaming\62884fuck.exe35⤵
-
C:\Users\Admin\AppData\Roaming\62884fuck.exe"C:\Users\Admin\AppData\Roaming\62884fuck.exe"36⤵
-
C:\Users\Admin\AppData\Roaming\62884fuck.exe"C:\Users\Admin\AppData\Roaming\62884fuck.exe"37⤵
-
C:\Users\Admin\AppData\Roaming\62884fuck.exe"C:\Users\Admin\AppData\Roaming\62884fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp38⤵
-
-
C:\Users\Admin\AppData\Roaming\62884fuck.exe"C:\Users\Admin\AppData\Roaming\62884fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp38⤵
-
-
C:\Users\Admin\AppData\Roaming\62884fuck.exe"C:\Users\Admin\AppData\Roaming\62884fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp38⤵
-
-
-
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Tempscratch.cmd35⤵
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\fuck.exe"C:\Users\Admin\AppData\Local\Temp\fuck.exe"33⤵
-
C:\Users\Admin\AppData\Roaming\93059fuck.exeC:\Users\Admin\AppData\Roaming\93059fuck.exe34⤵
-
C:\Users\Admin\AppData\Roaming\93059fuck.exe"C:\Users\Admin\AppData\Roaming\93059fuck.exe"35⤵
-
C:\Users\Admin\AppData\Roaming\93059fuck.exe"C:\Users\Admin\AppData\Roaming\93059fuck.exe"36⤵
-
C:\Users\Admin\AppData\Roaming\93059fuck.exe"C:\Users\Admin\AppData\Roaming\93059fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp37⤵
-
-
C:\Users\Admin\AppData\Roaming\93059fuck.exe"C:\Users\Admin\AppData\Roaming\93059fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp37⤵
-
-
C:\Users\Admin\AppData\Roaming\93059fuck.exe"C:\Users\Admin\AppData\Roaming\93059fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp37⤵
-
-
-
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Tempscratch.cmd34⤵
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\fuck.exe"C:\Users\Admin\AppData\Local\Temp\fuck.exe"32⤵
-
C:\Users\Admin\AppData\Roaming\83230fuck.exeC:\Users\Admin\AppData\Roaming\83230fuck.exe33⤵
-
C:\Users\Admin\AppData\Roaming\83230fuck.exe"C:\Users\Admin\AppData\Roaming\83230fuck.exe"34⤵
-
C:\Users\Admin\AppData\Roaming\83230fuck.exe"C:\Users\Admin\AppData\Roaming\83230fuck.exe"35⤵
-
C:\Users\Admin\AppData\Roaming\83230fuck.exe"C:\Users\Admin\AppData\Roaming\83230fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp36⤵
-
-
C:\Users\Admin\AppData\Roaming\83230fuck.exe"C:\Users\Admin\AppData\Roaming\83230fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp36⤵
-
-
C:\Users\Admin\AppData\Roaming\83230fuck.exe"C:\Users\Admin\AppData\Roaming\83230fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp36⤵
-
-
-
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Tempscratch.cmd33⤵
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\fuck.exe"C:\Users\Admin\AppData\Local\Temp\fuck.exe"31⤵
-
C:\Users\Admin\AppData\Roaming\68856fuck.exeC:\Users\Admin\AppData\Roaming\68856fuck.exe32⤵
-
C:\Users\Admin\AppData\Roaming\68856fuck.exe"C:\Users\Admin\AppData\Roaming\68856fuck.exe"33⤵
-
C:\Users\Admin\AppData\Roaming\68856fuck.exe"C:\Users\Admin\AppData\Roaming\68856fuck.exe"34⤵
-
C:\Users\Admin\AppData\Roaming\68856fuck.exe"C:\Users\Admin\AppData\Roaming\68856fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp35⤵
-
-
C:\Users\Admin\AppData\Roaming\68856fuck.exe"C:\Users\Admin\AppData\Roaming\68856fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp35⤵
-
-
C:\Users\Admin\AppData\Roaming\68856fuck.exe"C:\Users\Admin\AppData\Roaming\68856fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp35⤵
-
-
-
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Tempscratch.cmd32⤵
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\fuck.exe"C:\Users\Admin\AppData\Local\Temp\fuck.exe"30⤵
-
C:\Users\Admin\AppData\Roaming\82402fuck.exeC:\Users\Admin\AppData\Roaming\82402fuck.exe31⤵
-
C:\Users\Admin\AppData\Roaming\82402fuck.exe"C:\Users\Admin\AppData\Roaming\82402fuck.exe"32⤵
-
C:\Users\Admin\AppData\Roaming\82402fuck.exe"C:\Users\Admin\AppData\Roaming\82402fuck.exe"33⤵
-
C:\Users\Admin\AppData\Roaming\82402fuck.exe"C:\Users\Admin\AppData\Roaming\82402fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp34⤵
-
-
C:\Users\Admin\AppData\Roaming\82402fuck.exe"C:\Users\Admin\AppData\Roaming\82402fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp34⤵
-
-
C:\Users\Admin\AppData\Roaming\82402fuck.exe"C:\Users\Admin\AppData\Roaming\82402fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp34⤵
-
-
-
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Tempscratch.cmd31⤵
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\fuck.exe"C:\Users\Admin\AppData\Local\Temp\fuck.exe"29⤵
-
C:\Users\Admin\AppData\Roaming\82402fuck.exeC:\Users\Admin\AppData\Roaming\82402fuck.exe30⤵
-
C:\Users\Admin\AppData\Roaming\82402fuck.exe"C:\Users\Admin\AppData\Roaming\82402fuck.exe"31⤵
-
C:\Users\Admin\AppData\Roaming\82402fuck.exe"C:\Users\Admin\AppData\Roaming\82402fuck.exe"32⤵
-
C:\Users\Admin\AppData\Roaming\82402fuck.exe"C:\Users\Admin\AppData\Roaming\82402fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp33⤵
-
-
C:\Users\Admin\AppData\Roaming\82402fuck.exe"C:\Users\Admin\AppData\Roaming\82402fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp33⤵
-
-
C:\Users\Admin\AppData\Roaming\82402fuck.exe"C:\Users\Admin\AppData\Roaming\82402fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp33⤵
-
-
-
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Tempscratch.cmd30⤵
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\fuck.exe"C:\Users\Admin\AppData\Local\Temp\fuck.exe"28⤵
-
C:\Users\Admin\AppData\Roaming\44960fuck.exeC:\Users\Admin\AppData\Roaming\44960fuck.exe29⤵
-
C:\Users\Admin\AppData\Roaming\44960fuck.exe"C:\Users\Admin\AppData\Roaming\44960fuck.exe"30⤵
-
C:\Users\Admin\AppData\Roaming\44960fuck.exe"C:\Users\Admin\AppData\Roaming\44960fuck.exe"31⤵
-
C:\Users\Admin\AppData\Roaming\44960fuck.exe"C:\Users\Admin\AppData\Roaming\44960fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp32⤵
-
-
C:\Users\Admin\AppData\Roaming\44960fuck.exe"C:\Users\Admin\AppData\Roaming\44960fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp32⤵
-
-
C:\Users\Admin\AppData\Roaming\44960fuck.exe"C:\Users\Admin\AppData\Roaming\44960fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp32⤵
-
-
-
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Tempscratch.cmd29⤵
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\fuck.exe"C:\Users\Admin\AppData\Local\Temp\fuck.exe"27⤵
-
C:\Users\Admin\AppData\Roaming\12780fuck.exeC:\Users\Admin\AppData\Roaming\12780fuck.exe28⤵
-
C:\Users\Admin\AppData\Roaming\12780fuck.exe"C:\Users\Admin\AppData\Roaming\12780fuck.exe"29⤵
-
C:\Users\Admin\AppData\Roaming\12780fuck.exe"C:\Users\Admin\AppData\Roaming\12780fuck.exe"30⤵
-
C:\Users\Admin\AppData\Roaming\12780fuck.exe"C:\Users\Admin\AppData\Roaming\12780fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp31⤵
-
-
C:\Users\Admin\AppData\Roaming\12780fuck.exe"C:\Users\Admin\AppData\Roaming\12780fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp31⤵
-
-
C:\Users\Admin\AppData\Roaming\12780fuck.exe"C:\Users\Admin\AppData\Roaming\12780fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp31⤵
-
-
-
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Tempscratch.cmd28⤵
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\fuck.exe"C:\Users\Admin\AppData\Local\Temp\fuck.exe"26⤵
-
C:\Users\Admin\AppData\Roaming\50475fuck.exeC:\Users\Admin\AppData\Roaming\50475fuck.exe27⤵
-
C:\Users\Admin\AppData\Roaming\50475fuck.exe"C:\Users\Admin\AppData\Roaming\50475fuck.exe"28⤵
-
C:\Users\Admin\AppData\Roaming\50475fuck.exe"C:\Users\Admin\AppData\Roaming\50475fuck.exe"29⤵
-
C:\Users\Admin\AppData\Roaming\50475fuck.exe"C:\Users\Admin\AppData\Roaming\50475fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp30⤵
-
-
C:\Users\Admin\AppData\Roaming\50475fuck.exe"C:\Users\Admin\AppData\Roaming\50475fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp30⤵
-
-
C:\Users\Admin\AppData\Roaming\50475fuck.exe"C:\Users\Admin\AppData\Roaming\50475fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp30⤵
-
-
-
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Tempscratch.cmd27⤵
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\fuck.exe"C:\Users\Admin\AppData\Local\Temp\fuck.exe"25⤵
-
C:\Users\Admin\AppData\Roaming\50475fuck.exeC:\Users\Admin\AppData\Roaming\50475fuck.exe26⤵
-
C:\Users\Admin\AppData\Roaming\50475fuck.exe"C:\Users\Admin\AppData\Roaming\50475fuck.exe"27⤵
-
C:\Users\Admin\AppData\Roaming\50475fuck.exe"C:\Users\Admin\AppData\Roaming\50475fuck.exe"28⤵
-
C:\Users\Admin\AppData\Roaming\50475fuck.exe"C:\Users\Admin\AppData\Roaming\50475fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp29⤵
-
-
C:\Users\Admin\AppData\Roaming\50475fuck.exe"C:\Users\Admin\AppData\Roaming\50475fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp29⤵
-
-
C:\Users\Admin\AppData\Roaming\50475fuck.exe"C:\Users\Admin\AppData\Roaming\50475fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp29⤵
-
-
-
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Tempscratch.cmd26⤵
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\fuck.exe"C:\Users\Admin\AppData\Local\Temp\fuck.exe"24⤵
-
C:\Users\Admin\AppData\Roaming\17198fuck.exeC:\Users\Admin\AppData\Roaming\17198fuck.exe25⤵
-
C:\Users\Admin\AppData\Roaming\17198fuck.exe"C:\Users\Admin\AppData\Roaming\17198fuck.exe"26⤵
-
C:\Users\Admin\AppData\Roaming\17198fuck.exe"C:\Users\Admin\AppData\Roaming\17198fuck.exe"27⤵
-
C:\Users\Admin\AppData\Roaming\17198fuck.exe"C:\Users\Admin\AppData\Roaming\17198fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp28⤵
-
-
C:\Users\Admin\AppData\Roaming\17198fuck.exe"C:\Users\Admin\AppData\Roaming\17198fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp28⤵
-
-
C:\Users\Admin\AppData\Roaming\17198fuck.exe"C:\Users\Admin\AppData\Roaming\17198fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp28⤵
-
-
-
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Tempscratch.cmd25⤵
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\fuck.exe"C:\Users\Admin\AppData\Local\Temp\fuck.exe"23⤵
-
C:\Users\Admin\AppData\Roaming\25756fuck.exeC:\Users\Admin\AppData\Roaming\25756fuck.exe24⤵
-
C:\Users\Admin\AppData\Roaming\25756fuck.exe"C:\Users\Admin\AppData\Roaming\25756fuck.exe"25⤵
-
C:\Users\Admin\AppData\Roaming\25756fuck.exe"C:\Users\Admin\AppData\Roaming\25756fuck.exe"26⤵
-
C:\Users\Admin\AppData\Roaming\25756fuck.exe"C:\Users\Admin\AppData\Roaming\25756fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp27⤵
-
-
C:\Users\Admin\AppData\Roaming\25756fuck.exe"C:\Users\Admin\AppData\Roaming\25756fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp27⤵
-
-
C:\Users\Admin\AppData\Roaming\25756fuck.exe"C:\Users\Admin\AppData\Roaming\25756fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp27⤵
-
-
-
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Tempscratch.cmd24⤵
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\fuck.exe"C:\Users\Admin\AppData\Local\Temp\fuck.exe"22⤵
-
C:\Users\Admin\AppData\Roaming\33422fuck.exeC:\Users\Admin\AppData\Roaming\33422fuck.exe23⤵
-
C:\Users\Admin\AppData\Roaming\33422fuck.exe"C:\Users\Admin\AppData\Roaming\33422fuck.exe"24⤵
-
C:\Users\Admin\AppData\Roaming\33422fuck.exe"C:\Users\Admin\AppData\Roaming\33422fuck.exe"25⤵
-
C:\Users\Admin\AppData\Roaming\33422fuck.exe"C:\Users\Admin\AppData\Roaming\33422fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp26⤵
-
-
C:\Users\Admin\AppData\Roaming\33422fuck.exe"C:\Users\Admin\AppData\Roaming\33422fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp26⤵
-
-
C:\Users\Admin\AppData\Roaming\33422fuck.exe"C:\Users\Admin\AppData\Roaming\33422fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp26⤵
-
-
-
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Tempscratch.cmd23⤵
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\fuck.exe"C:\Users\Admin\AppData\Local\Temp\fuck.exe"21⤵
-
C:\Users\Admin\AppData\Roaming\24048fuck.exeC:\Users\Admin\AppData\Roaming\24048fuck.exe22⤵
-
C:\Users\Admin\AppData\Roaming\24048fuck.exe"C:\Users\Admin\AppData\Roaming\24048fuck.exe"23⤵
-
C:\Users\Admin\AppData\Roaming\24048fuck.exe"C:\Users\Admin\AppData\Roaming\24048fuck.exe"24⤵
-
C:\Users\Admin\AppData\Roaming\24048fuck.exe"C:\Users\Admin\AppData\Roaming\24048fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp25⤵
-
-
C:\Users\Admin\AppData\Roaming\24048fuck.exe"C:\Users\Admin\AppData\Roaming\24048fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp25⤵
-
-
C:\Users\Admin\AppData\Roaming\24048fuck.exe"C:\Users\Admin\AppData\Roaming\24048fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp25⤵
-
-
-
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Tempscratch.cmd22⤵
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\fuck.exe"C:\Users\Admin\AppData\Local\Temp\fuck.exe"20⤵
-
C:\Users\Admin\AppData\Roaming\24048fuck.exeC:\Users\Admin\AppData\Roaming\24048fuck.exe21⤵
-
C:\Users\Admin\AppData\Roaming\24048fuck.exe"C:\Users\Admin\AppData\Roaming\24048fuck.exe"22⤵
-
C:\Users\Admin\AppData\Roaming\24048fuck.exe"C:\Users\Admin\AppData\Roaming\24048fuck.exe"23⤵
-
C:\Users\Admin\AppData\Roaming\24048fuck.exe"C:\Users\Admin\AppData\Roaming\24048fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp24⤵
-
-
C:\Users\Admin\AppData\Roaming\24048fuck.exe"C:\Users\Admin\AppData\Roaming\24048fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp24⤵
-
-
C:\Users\Admin\AppData\Roaming\24048fuck.exe"C:\Users\Admin\AppData\Roaming\24048fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp24⤵
-
-
-
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Tempscratch.cmd21⤵
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\fuck.exe"C:\Users\Admin\AppData\Local\Temp\fuck.exe"19⤵
-
C:\Users\Admin\AppData\Roaming\24048fuck.exeC:\Users\Admin\AppData\Roaming\24048fuck.exe20⤵
-
C:\Users\Admin\AppData\Roaming\24048fuck.exe"C:\Users\Admin\AppData\Roaming\24048fuck.exe"21⤵
-
C:\Users\Admin\AppData\Roaming\24048fuck.exe"C:\Users\Admin\AppData\Roaming\24048fuck.exe"22⤵
-
C:\Users\Admin\AppData\Roaming\24048fuck.exe"C:\Users\Admin\AppData\Roaming\24048fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp23⤵
-
-
C:\Users\Admin\AppData\Roaming\24048fuck.exe"C:\Users\Admin\AppData\Roaming\24048fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp23⤵
-
-
C:\Users\Admin\AppData\Roaming\24048fuck.exe"C:\Users\Admin\AppData\Roaming\24048fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp23⤵
-
-
-
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Tempscratch.cmd20⤵
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\fuck.exe"C:\Users\Admin\AppData\Local\Temp\fuck.exe"18⤵
-
C:\Users\Admin\AppData\Roaming\24048fuck.exeC:\Users\Admin\AppData\Roaming\24048fuck.exe19⤵
-
C:\Users\Admin\AppData\Roaming\24048fuck.exe"C:\Users\Admin\AppData\Roaming\24048fuck.exe"20⤵
-
C:\Users\Admin\AppData\Roaming\24048fuck.exe"C:\Users\Admin\AppData\Roaming\24048fuck.exe"21⤵
-
C:\Users\Admin\AppData\Roaming\24048fuck.exe"C:\Users\Admin\AppData\Roaming\24048fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp22⤵
-
-
C:\Users\Admin\AppData\Roaming\24048fuck.exe"C:\Users\Admin\AppData\Roaming\24048fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp22⤵
-
-
C:\Users\Admin\AppData\Roaming\24048fuck.exe"C:\Users\Admin\AppData\Roaming\24048fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp22⤵
-
-
-
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Tempscratch.cmd19⤵
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\fuck.exe"C:\Users\Admin\AppData\Local\Temp\fuck.exe"17⤵
-
C:\Users\Admin\AppData\Roaming\24048fuck.exeC:\Users\Admin\AppData\Roaming\24048fuck.exe18⤵
-
C:\Users\Admin\AppData\Roaming\24048fuck.exe"C:\Users\Admin\AppData\Roaming\24048fuck.exe"19⤵
-
C:\Users\Admin\AppData\Roaming\24048fuck.exe"C:\Users\Admin\AppData\Roaming\24048fuck.exe"20⤵
-
C:\Users\Admin\AppData\Roaming\24048fuck.exe"C:\Users\Admin\AppData\Roaming\24048fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp21⤵
-
-
C:\Users\Admin\AppData\Roaming\24048fuck.exe"C:\Users\Admin\AppData\Roaming\24048fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp21⤵
-
-
C:\Users\Admin\AppData\Roaming\24048fuck.exe"C:\Users\Admin\AppData\Roaming\24048fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp21⤵
-
-
-
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Tempscratch.cmd18⤵
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\fuck.exe"C:\Users\Admin\AppData\Local\Temp\fuck.exe"16⤵
-
C:\Users\Admin\AppData\Roaming\45292fuck.exeC:\Users\Admin\AppData\Roaming\45292fuck.exe17⤵
-
C:\Users\Admin\AppData\Roaming\45292fuck.exe"C:\Users\Admin\AppData\Roaming\45292fuck.exe"18⤵
-
C:\Users\Admin\AppData\Roaming\45292fuck.exe"C:\Users\Admin\AppData\Roaming\45292fuck.exe"19⤵
-
C:\Users\Admin\AppData\Roaming\45292fuck.exe"C:\Users\Admin\AppData\Roaming\45292fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp20⤵
-
-
C:\Users\Admin\AppData\Roaming\45292fuck.exe"C:\Users\Admin\AppData\Roaming\45292fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp20⤵
-
-
C:\Users\Admin\AppData\Roaming\45292fuck.exe"C:\Users\Admin\AppData\Roaming\45292fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp20⤵
-
-
-
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Tempscratch.cmd17⤵
-
-
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\fuck.exe"C:\Users\Admin\AppData\Local\Temp\fuck.exe"13⤵
-
C:\Users\Admin\AppData\Roaming\59466fuck.exeC:\Users\Admin\AppData\Roaming\59466fuck.exe14⤵
-
C:\Users\Admin\AppData\Roaming\59466fuck.exe"C:\Users\Admin\AppData\Roaming\59466fuck.exe"15⤵
-
C:\Users\Admin\AppData\Roaming\59466fuck.exe"C:\Users\Admin\AppData\Roaming\59466fuck.exe"16⤵
-
C:\Users\Admin\AppData\Roaming\59466fuck.exe"C:\Users\Admin\AppData\Roaming\59466fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp17⤵
-
-
C:\Users\Admin\AppData\Roaming\59466fuck.exe"C:\Users\Admin\AppData\Roaming\59466fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp17⤵
-
-
C:\Users\Admin\AppData\Roaming\59466fuck.exe"C:\Users\Admin\AppData\Roaming\59466fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp17⤵
-
-
-
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Tempscratch.cmd14⤵
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\fuck.exe"C:\Users\Admin\AppData\Local\Temp\fuck.exe"12⤵
-
C:\Users\Admin\AppData\Roaming\38100fuck.exeC:\Users\Admin\AppData\Roaming\38100fuck.exe13⤵
-
C:\Users\Admin\AppData\Roaming\38100fuck.exe"C:\Users\Admin\AppData\Roaming\38100fuck.exe"14⤵
-
C:\Users\Admin\AppData\Roaming\38100fuck.exe"C:\Users\Admin\AppData\Roaming\38100fuck.exe"15⤵
-
C:\Users\Admin\AppData\Roaming\38100fuck.exe"C:\Users\Admin\AppData\Roaming\38100fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp16⤵
-
-
C:\Users\Admin\AppData\Roaming\38100fuck.exe"C:\Users\Admin\AppData\Roaming\38100fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp16⤵
-
-
C:\Users\Admin\AppData\Roaming\38100fuck.exe"C:\Users\Admin\AppData\Roaming\38100fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp16⤵
-
-
-
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Tempscratch.cmd13⤵
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\fuck.exe"C:\Users\Admin\AppData\Local\Temp\fuck.exe"11⤵
-
C:\Users\Admin\AppData\Roaming\31158fuck.exeC:\Users\Admin\AppData\Roaming\31158fuck.exe12⤵
-
C:\Users\Admin\AppData\Roaming\31158fuck.exe"C:\Users\Admin\AppData\Roaming\31158fuck.exe"13⤵
-
C:\Users\Admin\AppData\Roaming\31158fuck.exe"C:\Users\Admin\AppData\Roaming\31158fuck.exe"14⤵
-
C:\Users\Admin\AppData\Roaming\31158fuck.exe"C:\Users\Admin\AppData\Roaming\31158fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp15⤵
-
-
C:\Users\Admin\AppData\Roaming\31158fuck.exe"C:\Users\Admin\AppData\Roaming\31158fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp15⤵
-
-
C:\Users\Admin\AppData\Roaming\31158fuck.exe"C:\Users\Admin\AppData\Roaming\31158fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp15⤵
-
-
-
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Tempscratch.cmd12⤵
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\fuck.exe"C:\Users\Admin\AppData\Local\Temp\fuck.exe"10⤵
-
C:\Users\Admin\AppData\Roaming\38100fuck.exeC:\Users\Admin\AppData\Roaming\38100fuck.exe11⤵
-
C:\Users\Admin\AppData\Roaming\38100fuck.exe"C:\Users\Admin\AppData\Roaming\38100fuck.exe"12⤵
-
C:\Users\Admin\AppData\Roaming\38100fuck.exe"C:\Users\Admin\AppData\Roaming\38100fuck.exe"13⤵
-
C:\Users\Admin\AppData\Roaming\38100fuck.exe"C:\Users\Admin\AppData\Roaming\38100fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp14⤵
-
-
C:\Users\Admin\AppData\Roaming\38100fuck.exe"C:\Users\Admin\AppData\Roaming\38100fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp14⤵
-
-
C:\Users\Admin\AppData\Roaming\38100fuck.exe"C:\Users\Admin\AppData\Roaming\38100fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp14⤵
-
-
-
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Tempscratch.cmd11⤵
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\fuck.exe"C:\Users\Admin\AppData\Local\Temp\fuck.exe"9⤵
-
C:\Users\Admin\AppData\Roaming\88803fuck.exeC:\Users\Admin\AppData\Roaming\88803fuck.exe10⤵
-
C:\Users\Admin\AppData\Roaming\88803fuck.exe"C:\Users\Admin\AppData\Roaming\88803fuck.exe"11⤵
-
C:\Users\Admin\AppData\Roaming\88803fuck.exe"C:\Users\Admin\AppData\Roaming\88803fuck.exe"12⤵
-
C:\Users\Admin\AppData\Roaming\88803fuck.exe"C:\Users\Admin\AppData\Roaming\88803fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp13⤵
-
-
C:\Users\Admin\AppData\Roaming\88803fuck.exe"C:\Users\Admin\AppData\Roaming\88803fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp13⤵
-
-
C:\Users\Admin\AppData\Roaming\88803fuck.exe"C:\Users\Admin\AppData\Roaming\88803fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp13⤵
-
-
-
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Tempscratch.cmd10⤵
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\fuck.exe"C:\Users\Admin\AppData\Local\Temp\fuck.exe"8⤵
-
C:\Users\Admin\AppData\Roaming\88803fuck.exeC:\Users\Admin\AppData\Roaming\88803fuck.exe9⤵
-
C:\Users\Admin\AppData\Roaming\88803fuck.exe"C:\Users\Admin\AppData\Roaming\88803fuck.exe"10⤵
-
C:\Users\Admin\AppData\Roaming\88803fuck.exe"C:\Users\Admin\AppData\Roaming\88803fuck.exe"11⤵
-
C:\Users\Admin\AppData\Roaming\88803fuck.exe"C:\Users\Admin\AppData\Roaming\88803fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp12⤵
-
-
C:\Users\Admin\AppData\Roaming\88803fuck.exe"C:\Users\Admin\AppData\Roaming\88803fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp12⤵
-
-
C:\Users\Admin\AppData\Roaming\88803fuck.exe"C:\Users\Admin\AppData\Roaming\88803fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp12⤵
-
-
-
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Tempscratch.cmd9⤵
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\fuck.exe"C:\Users\Admin\AppData\Local\Temp\fuck.exe"7⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exeC:\Users\Admin\AppData\Roaming\15771fuck.exe8⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"9⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"10⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp11⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp11⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp11⤵
-
-
-
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Tempscratch.cmd8⤵
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\fuck.exe"C:\Users\Admin\AppData\Local\Temp\fuck.exe"6⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exeC:\Users\Admin\AppData\Roaming\15771fuck.exe7⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"8⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"9⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp10⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp10⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp10⤵
-
-
-
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Tempscratch.cmd7⤵
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\fuck.exe"C:\Users\Admin\AppData\Local\Temp\fuck.exe"5⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exeC:\Users\Admin\AppData\Roaming\15771fuck.exe6⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"7⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"8⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp9⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp9⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp9⤵
-
-
-
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Tempscratch.cmd6⤵
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\fuck.exe"C:\Users\Admin\AppData\Local\Temp\fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exeC:\Users\Admin\AppData\Roaming\15771fuck.exe5⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"6⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"7⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp8⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp8⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp8⤵
-
-
-
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\fuck.exe"C:\Users\Admin\AppData\Local\Temp\fuck.exe"3⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
-
C:\Users\Admin\AppData\Roaming\15771fuck.exeC:\Users\Admin\AppData\Roaming\15771fuck.exe4⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"5⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"6⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp7⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp7⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp7⤵
-
-
-
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Tempscratch.cmd4⤵
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\fuck.exe"C:\Users\Admin\AppData\Local\Temp\fuck.exe"2⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
-
C:\Users\Admin\AppData\Roaming\15771fuck.exeC:\Users\Admin\AppData\Roaming\15771fuck.exe3⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"5⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp6⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp6⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp6⤵
-
-
-
-
-
C:\Windows\SysWOW64\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Tempscratch.cmd3⤵
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\15771fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exeC:\Users\Admin\AppData\Roaming\15771fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\15771fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exeC:\Users\Admin\AppData\Roaming\15771fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\15771fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exeC:\Users\Admin\AppData\Roaming\15771fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\15771fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exeC:\Users\Admin\AppData\Roaming\15771fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\15771fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exeC:\Users\Admin\AppData\Roaming\15771fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\15771fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exeC:\Users\Admin\AppData\Roaming\15771fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\15771fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exeC:\Users\Admin\AppData\Roaming\15771fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\88803fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\88803fuck.exeC:\Users\Admin\AppData\Roaming\88803fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\88803fuck.exe"C:\Users\Admin\AppData\Roaming\88803fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\88803fuck.exe"C:\Users\Admin\AppData\Roaming\88803fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\88803fuck.exe"C:\Users\Admin\AppData\Roaming\88803fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\88803fuck.exe"C:\Users\Admin\AppData\Roaming\88803fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\88803fuck.exe"C:\Users\Admin\AppData\Roaming\88803fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\15771fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exeC:\Users\Admin\AppData\Roaming\15771fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\88803fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\88803fuck.exeC:\Users\Admin\AppData\Roaming\88803fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\88803fuck.exe"C:\Users\Admin\AppData\Roaming\88803fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\88803fuck.exe"C:\Users\Admin\AppData\Roaming\88803fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\88803fuck.exe"C:\Users\Admin\AppData\Roaming\88803fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\88803fuck.exe"C:\Users\Admin\AppData\Roaming\88803fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\88803fuck.exe"C:\Users\Admin\AppData\Roaming\88803fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\15771fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exeC:\Users\Admin\AppData\Roaming\15771fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\31158fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\31158fuck.exeC:\Users\Admin\AppData\Roaming\31158fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\31158fuck.exe"C:\Users\Admin\AppData\Roaming\31158fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\31158fuck.exe"C:\Users\Admin\AppData\Roaming\31158fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\31158fuck.exe"C:\Users\Admin\AppData\Roaming\31158fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\31158fuck.exe"C:\Users\Admin\AppData\Roaming\31158fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\31158fuck.exe"C:\Users\Admin\AppData\Roaming\31158fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\15771fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exeC:\Users\Admin\AppData\Roaming\15771fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\15771fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exeC:\Users\Admin\AppData\Roaming\15771fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\15771fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exeC:\Users\Admin\AppData\Roaming\15771fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\15771fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exeC:\Users\Admin\AppData\Roaming\15771fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\15771fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exeC:\Users\Admin\AppData\Roaming\15771fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\59466fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\59466fuck.exeC:\Users\Admin\AppData\Roaming\59466fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\59466fuck.exe"C:\Users\Admin\AppData\Roaming\59466fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\59466fuck.exe"C:\Users\Admin\AppData\Roaming\59466fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\59466fuck.exe"C:\Users\Admin\AppData\Roaming\59466fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\59466fuck.exe"C:\Users\Admin\AppData\Roaming\59466fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\59466fuck.exe"C:\Users\Admin\AppData\Roaming\59466fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\38100fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\38100fuck.exeC:\Users\Admin\AppData\Roaming\38100fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\38100fuck.exe"C:\Users\Admin\AppData\Roaming\38100fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\38100fuck.exe"C:\Users\Admin\AppData\Roaming\38100fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\38100fuck.exe"C:\Users\Admin\AppData\Roaming\38100fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\38100fuck.exe"C:\Users\Admin\AppData\Roaming\38100fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\38100fuck.exe"C:\Users\Admin\AppData\Roaming\38100fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\38100fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\38100fuck.exeC:\Users\Admin\AppData\Roaming\38100fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\38100fuck.exe"C:\Users\Admin\AppData\Roaming\38100fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\38100fuck.exe"C:\Users\Admin\AppData\Roaming\38100fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\38100fuck.exe"C:\Users\Admin\AppData\Roaming\38100fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\38100fuck.exe"C:\Users\Admin\AppData\Roaming\38100fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\38100fuck.exe"C:\Users\Admin\AppData\Roaming\38100fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\88803fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\88803fuck.exeC:\Users\Admin\AppData\Roaming\88803fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\88803fuck.exe"C:\Users\Admin\AppData\Roaming\88803fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\88803fuck.exe"C:\Users\Admin\AppData\Roaming\88803fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\88803fuck.exe"C:\Users\Admin\AppData\Roaming\88803fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\88803fuck.exe"C:\Users\Admin\AppData\Roaming\88803fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\88803fuck.exe"C:\Users\Admin\AppData\Roaming\88803fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\88803fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\88803fuck.exeC:\Users\Admin\AppData\Roaming\88803fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\88803fuck.exe"C:\Users\Admin\AppData\Roaming\88803fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\88803fuck.exe"C:\Users\Admin\AppData\Roaming\88803fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\88803fuck.exe"C:\Users\Admin\AppData\Roaming\88803fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\88803fuck.exe"C:\Users\Admin\AppData\Roaming\88803fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\88803fuck.exe"C:\Users\Admin\AppData\Roaming\88803fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\31158fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\31158fuck.exeC:\Users\Admin\AppData\Roaming\31158fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\31158fuck.exe"C:\Users\Admin\AppData\Roaming\31158fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\31158fuck.exe"C:\Users\Admin\AppData\Roaming\31158fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\31158fuck.exe"C:\Users\Admin\AppData\Roaming\31158fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\31158fuck.exe"C:\Users\Admin\AppData\Roaming\31158fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\31158fuck.exe"C:\Users\Admin\AppData\Roaming\31158fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\15771fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exeC:\Users\Admin\AppData\Roaming\15771fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\15771fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exeC:\Users\Admin\AppData\Roaming\15771fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\15771fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exeC:\Users\Admin\AppData\Roaming\15771fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\15771fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exeC:\Users\Admin\AppData\Roaming\15771fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\15771fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exeC:\Users\Admin\AppData\Roaming\15771fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\38100fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\38100fuck.exeC:\Users\Admin\AppData\Roaming\38100fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\38100fuck.exe"C:\Users\Admin\AppData\Roaming\38100fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\38100fuck.exe"C:\Users\Admin\AppData\Roaming\38100fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\38100fuck.exe"C:\Users\Admin\AppData\Roaming\38100fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\38100fuck.exe"C:\Users\Admin\AppData\Roaming\38100fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\38100fuck.exe"C:\Users\Admin\AppData\Roaming\38100fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\38100fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\38100fuck.exeC:\Users\Admin\AppData\Roaming\38100fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\38100fuck.exe"C:\Users\Admin\AppData\Roaming\38100fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\38100fuck.exe"C:\Users\Admin\AppData\Roaming\38100fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\38100fuck.exe"C:\Users\Admin\AppData\Roaming\38100fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\38100fuck.exe"C:\Users\Admin\AppData\Roaming\38100fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\38100fuck.exe"C:\Users\Admin\AppData\Roaming\38100fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\59466fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\59466fuck.exeC:\Users\Admin\AppData\Roaming\59466fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\59466fuck.exe"C:\Users\Admin\AppData\Roaming\59466fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\59466fuck.exe"C:\Users\Admin\AppData\Roaming\59466fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\59466fuck.exe"C:\Users\Admin\AppData\Roaming\59466fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\59466fuck.exe"C:\Users\Admin\AppData\Roaming\59466fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\59466fuck.exe"C:\Users\Admin\AppData\Roaming\59466fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\15771fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exeC:\Users\Admin\AppData\Roaming\15771fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\31158fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\31158fuck.exeC:\Users\Admin\AppData\Roaming\31158fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\31158fuck.exe"C:\Users\Admin\AppData\Roaming\31158fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\31158fuck.exe"C:\Users\Admin\AppData\Roaming\31158fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\31158fuck.exe"C:\Users\Admin\AppData\Roaming\31158fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\31158fuck.exe"C:\Users\Admin\AppData\Roaming\31158fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\31158fuck.exe"C:\Users\Admin\AppData\Roaming\31158fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\15771fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exeC:\Users\Admin\AppData\Roaming\15771fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\45292fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\45292fuck.exeC:\Users\Admin\AppData\Roaming\45292fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\45292fuck.exe"C:\Users\Admin\AppData\Roaming\45292fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\45292fuck.exe"C:\Users\Admin\AppData\Roaming\45292fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\45292fuck.exe"C:\Users\Admin\AppData\Roaming\45292fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\45292fuck.exe"C:\Users\Admin\AppData\Roaming\45292fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\45292fuck.exe"C:\Users\Admin\AppData\Roaming\45292fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\15771fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exeC:\Users\Admin\AppData\Roaming\15771fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\15771fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exeC:\Users\Admin\AppData\Roaming\15771fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\15771fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exeC:\Users\Admin\AppData\Roaming\15771fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\15771fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exeC:\Users\Admin\AppData\Roaming\15771fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\38100fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\38100fuck.exeC:\Users\Admin\AppData\Roaming\38100fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\38100fuck.exe"C:\Users\Admin\AppData\Roaming\38100fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\38100fuck.exe"C:\Users\Admin\AppData\Roaming\38100fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\38100fuck.exe"C:\Users\Admin\AppData\Roaming\38100fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\38100fuck.exe"C:\Users\Admin\AppData\Roaming\38100fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\38100fuck.exe"C:\Users\Admin\AppData\Roaming\38100fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\15771fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exeC:\Users\Admin\AppData\Roaming\15771fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\38100fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\38100fuck.exeC:\Users\Admin\AppData\Roaming\38100fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\38100fuck.exe"C:\Users\Admin\AppData\Roaming\38100fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\38100fuck.exe"C:\Users\Admin\AppData\Roaming\38100fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\38100fuck.exe"C:\Users\Admin\AppData\Roaming\38100fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\38100fuck.exe"C:\Users\Admin\AppData\Roaming\38100fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\38100fuck.exe"C:\Users\Admin\AppData\Roaming\38100fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\59466fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\59466fuck.exeC:\Users\Admin\AppData\Roaming\59466fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\59466fuck.exe"C:\Users\Admin\AppData\Roaming\59466fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\59466fuck.exe"C:\Users\Admin\AppData\Roaming\59466fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\59466fuck.exe"C:\Users\Admin\AppData\Roaming\59466fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\59466fuck.exe"C:\Users\Admin\AppData\Roaming\59466fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\59466fuck.exe"C:\Users\Admin\AppData\Roaming\59466fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\24048fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\24048fuck.exeC:\Users\Admin\AppData\Roaming\24048fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\24048fuck.exe"C:\Users\Admin\AppData\Roaming\24048fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\24048fuck.exe"C:\Users\Admin\AppData\Roaming\24048fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\24048fuck.exe"C:\Users\Admin\AppData\Roaming\24048fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\24048fuck.exe"C:\Users\Admin\AppData\Roaming\24048fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\24048fuck.exe"C:\Users\Admin\AppData\Roaming\24048fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\24048fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\24048fuck.exeC:\Users\Admin\AppData\Roaming\24048fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\24048fuck.exe"C:\Users\Admin\AppData\Roaming\24048fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\24048fuck.exe"C:\Users\Admin\AppData\Roaming\24048fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\24048fuck.exe"C:\Users\Admin\AppData\Roaming\24048fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\24048fuck.exe"C:\Users\Admin\AppData\Roaming\24048fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\24048fuck.exe"C:\Users\Admin\AppData\Roaming\24048fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\24048fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\24048fuck.exeC:\Users\Admin\AppData\Roaming\24048fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\24048fuck.exe"C:\Users\Admin\AppData\Roaming\24048fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\24048fuck.exe"C:\Users\Admin\AppData\Roaming\24048fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\24048fuck.exe"C:\Users\Admin\AppData\Roaming\24048fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\24048fuck.exe"C:\Users\Admin\AppData\Roaming\24048fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\24048fuck.exe"C:\Users\Admin\AppData\Roaming\24048fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\24048fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\24048fuck.exeC:\Users\Admin\AppData\Roaming\24048fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\24048fuck.exe"C:\Users\Admin\AppData\Roaming\24048fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\24048fuck.exe"C:\Users\Admin\AppData\Roaming\24048fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\24048fuck.exe"C:\Users\Admin\AppData\Roaming\24048fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\24048fuck.exe"C:\Users\Admin\AppData\Roaming\24048fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\24048fuck.exe"C:\Users\Admin\AppData\Roaming\24048fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\24048fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\24048fuck.exeC:\Users\Admin\AppData\Roaming\24048fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\24048fuck.exe"C:\Users\Admin\AppData\Roaming\24048fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\24048fuck.exe"C:\Users\Admin\AppData\Roaming\24048fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\24048fuck.exe"C:\Users\Admin\AppData\Roaming\24048fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\24048fuck.exe"C:\Users\Admin\AppData\Roaming\24048fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\24048fuck.exe"C:\Users\Admin\AppData\Roaming\24048fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\88803fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\88803fuck.exeC:\Users\Admin\AppData\Roaming\88803fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\88803fuck.exe"C:\Users\Admin\AppData\Roaming\88803fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\88803fuck.exe"C:\Users\Admin\AppData\Roaming\88803fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\88803fuck.exe"C:\Users\Admin\AppData\Roaming\88803fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\88803fuck.exe"C:\Users\Admin\AppData\Roaming\88803fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\88803fuck.exe"C:\Users\Admin\AppData\Roaming\88803fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\88803fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\88803fuck.exeC:\Users\Admin\AppData\Roaming\88803fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\88803fuck.exe"C:\Users\Admin\AppData\Roaming\88803fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\88803fuck.exe"C:\Users\Admin\AppData\Roaming\88803fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\88803fuck.exe"C:\Users\Admin\AppData\Roaming\88803fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\88803fuck.exe"C:\Users\Admin\AppData\Roaming\88803fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\88803fuck.exe"C:\Users\Admin\AppData\Roaming\88803fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\15771fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exeC:\Users\Admin\AppData\Roaming\15771fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\33422fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\33422fuck.exeC:\Users\Admin\AppData\Roaming\33422fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\33422fuck.exe"C:\Users\Admin\AppData\Roaming\33422fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\33422fuck.exe"C:\Users\Admin\AppData\Roaming\33422fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\33422fuck.exe"C:\Users\Admin\AppData\Roaming\33422fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\33422fuck.exe"C:\Users\Admin\AppData\Roaming\33422fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\33422fuck.exe"C:\Users\Admin\AppData\Roaming\33422fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\31158fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\31158fuck.exeC:\Users\Admin\AppData\Roaming\31158fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\31158fuck.exe"C:\Users\Admin\AppData\Roaming\31158fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\31158fuck.exe"C:\Users\Admin\AppData\Roaming\31158fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\31158fuck.exe"C:\Users\Admin\AppData\Roaming\31158fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\31158fuck.exe"C:\Users\Admin\AppData\Roaming\31158fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\31158fuck.exe"C:\Users\Admin\AppData\Roaming\31158fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\45292fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\45292fuck.exeC:\Users\Admin\AppData\Roaming\45292fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\45292fuck.exe"C:\Users\Admin\AppData\Roaming\45292fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\45292fuck.exe"C:\Users\Admin\AppData\Roaming\45292fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\45292fuck.exe"C:\Users\Admin\AppData\Roaming\45292fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\45292fuck.exe"C:\Users\Admin\AppData\Roaming\45292fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\45292fuck.exe"C:\Users\Admin\AppData\Roaming\45292fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\15771fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exeC:\Users\Admin\AppData\Roaming\15771fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\15771fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exeC:\Users\Admin\AppData\Roaming\15771fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\38100fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\38100fuck.exeC:\Users\Admin\AppData\Roaming\38100fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\38100fuck.exe"C:\Users\Admin\AppData\Roaming\38100fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\38100fuck.exe"C:\Users\Admin\AppData\Roaming\38100fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\38100fuck.exe"C:\Users\Admin\AppData\Roaming\38100fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\38100fuck.exe"C:\Users\Admin\AppData\Roaming\38100fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\38100fuck.exe"C:\Users\Admin\AppData\Roaming\38100fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\59466fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\59466fuck.exeC:\Users\Admin\AppData\Roaming\59466fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\59466fuck.exe"C:\Users\Admin\AppData\Roaming\59466fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\59466fuck.exe"C:\Users\Admin\AppData\Roaming\59466fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\59466fuck.exe"C:\Users\Admin\AppData\Roaming\59466fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\59466fuck.exe"C:\Users\Admin\AppData\Roaming\59466fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\59466fuck.exe"C:\Users\Admin\AppData\Roaming\59466fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\15771fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exeC:\Users\Admin\AppData\Roaming\15771fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\15771fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exeC:\Users\Admin\AppData\Roaming\15771fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\38100fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\38100fuck.exeC:\Users\Admin\AppData\Roaming\38100fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\38100fuck.exe"C:\Users\Admin\AppData\Roaming\38100fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\38100fuck.exe"C:\Users\Admin\AppData\Roaming\38100fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\38100fuck.exe"C:\Users\Admin\AppData\Roaming\38100fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\38100fuck.exe"C:\Users\Admin\AppData\Roaming\38100fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\38100fuck.exe"C:\Users\Admin\AppData\Roaming\38100fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\15771fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exeC:\Users\Admin\AppData\Roaming\15771fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\25756fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\25756fuck.exeC:\Users\Admin\AppData\Roaming\25756fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\25756fuck.exe"C:\Users\Admin\AppData\Roaming\25756fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\25756fuck.exe"C:\Users\Admin\AppData\Roaming\25756fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\25756fuck.exe"C:\Users\Admin\AppData\Roaming\25756fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\25756fuck.exe"C:\Users\Admin\AppData\Roaming\25756fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\25756fuck.exe"C:\Users\Admin\AppData\Roaming\25756fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\17198fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\17198fuck.exeC:\Users\Admin\AppData\Roaming\17198fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\17198fuck.exe"C:\Users\Admin\AppData\Roaming\17198fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\17198fuck.exe"C:\Users\Admin\AppData\Roaming\17198fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\17198fuck.exe"C:\Users\Admin\AppData\Roaming\17198fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\17198fuck.exe"C:\Users\Admin\AppData\Roaming\17198fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\17198fuck.exe"C:\Users\Admin\AppData\Roaming\17198fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\24048fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\24048fuck.exeC:\Users\Admin\AppData\Roaming\24048fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\24048fuck.exe"C:\Users\Admin\AppData\Roaming\24048fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\24048fuck.exe"C:\Users\Admin\AppData\Roaming\24048fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\24048fuck.exe"C:\Users\Admin\AppData\Roaming\24048fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\24048fuck.exe"C:\Users\Admin\AppData\Roaming\24048fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\24048fuck.exe"C:\Users\Admin\AppData\Roaming\24048fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\24048fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\24048fuck.exeC:\Users\Admin\AppData\Roaming\24048fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\24048fuck.exe"C:\Users\Admin\AppData\Roaming\24048fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\24048fuck.exe"C:\Users\Admin\AppData\Roaming\24048fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\24048fuck.exe"C:\Users\Admin\AppData\Roaming\24048fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\24048fuck.exe"C:\Users\Admin\AppData\Roaming\24048fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\24048fuck.exe"C:\Users\Admin\AppData\Roaming\24048fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\88803fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\88803fuck.exeC:\Users\Admin\AppData\Roaming\88803fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\88803fuck.exe"C:\Users\Admin\AppData\Roaming\88803fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\88803fuck.exe"C:\Users\Admin\AppData\Roaming\88803fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\88803fuck.exe"C:\Users\Admin\AppData\Roaming\88803fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\88803fuck.exe"C:\Users\Admin\AppData\Roaming\88803fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\88803fuck.exe"C:\Users\Admin\AppData\Roaming\88803fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\24048fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\24048fuck.exeC:\Users\Admin\AppData\Roaming\24048fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\24048fuck.exe"C:\Users\Admin\AppData\Roaming\24048fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\24048fuck.exe"C:\Users\Admin\AppData\Roaming\24048fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\24048fuck.exe"C:\Users\Admin\AppData\Roaming\24048fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\24048fuck.exe"C:\Users\Admin\AppData\Roaming\24048fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\24048fuck.exe"C:\Users\Admin\AppData\Roaming\24048fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\50475fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\50475fuck.exeC:\Users\Admin\AppData\Roaming\50475fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\50475fuck.exe"C:\Users\Admin\AppData\Roaming\50475fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\50475fuck.exe"C:\Users\Admin\AppData\Roaming\50475fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\50475fuck.exe"C:\Users\Admin\AppData\Roaming\50475fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\50475fuck.exe"C:\Users\Admin\AppData\Roaming\50475fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\50475fuck.exe"C:\Users\Admin\AppData\Roaming\50475fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\50475fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\50475fuck.exeC:\Users\Admin\AppData\Roaming\50475fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\50475fuck.exe"C:\Users\Admin\AppData\Roaming\50475fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\50475fuck.exe"C:\Users\Admin\AppData\Roaming\50475fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\50475fuck.exe"C:\Users\Admin\AppData\Roaming\50475fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\50475fuck.exe"C:\Users\Admin\AppData\Roaming\50475fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\50475fuck.exe"C:\Users\Admin\AppData\Roaming\50475fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\24048fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\24048fuck.exeC:\Users\Admin\AppData\Roaming\24048fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\24048fuck.exe"C:\Users\Admin\AppData\Roaming\24048fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\24048fuck.exe"C:\Users\Admin\AppData\Roaming\24048fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\24048fuck.exe"C:\Users\Admin\AppData\Roaming\24048fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\24048fuck.exe"C:\Users\Admin\AppData\Roaming\24048fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\24048fuck.exe"C:\Users\Admin\AppData\Roaming\24048fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\24048fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\24048fuck.exeC:\Users\Admin\AppData\Roaming\24048fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\24048fuck.exe"C:\Users\Admin\AppData\Roaming\24048fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\24048fuck.exe"C:\Users\Admin\AppData\Roaming\24048fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\24048fuck.exe"C:\Users\Admin\AppData\Roaming\24048fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\24048fuck.exe"C:\Users\Admin\AppData\Roaming\24048fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\24048fuck.exe"C:\Users\Admin\AppData\Roaming\24048fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\88803fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\88803fuck.exeC:\Users\Admin\AppData\Roaming\88803fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\88803fuck.exe"C:\Users\Admin\AppData\Roaming\88803fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\88803fuck.exe"C:\Users\Admin\AppData\Roaming\88803fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\88803fuck.exe"C:\Users\Admin\AppData\Roaming\88803fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\88803fuck.exe"C:\Users\Admin\AppData\Roaming\88803fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\88803fuck.exe"C:\Users\Admin\AppData\Roaming\88803fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\12780fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\12780fuck.exeC:\Users\Admin\AppData\Roaming\12780fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\12780fuck.exe"C:\Users\Admin\AppData\Roaming\12780fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\12780fuck.exe"C:\Users\Admin\AppData\Roaming\12780fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\12780fuck.exe"C:\Users\Admin\AppData\Roaming\12780fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\12780fuck.exe"C:\Users\Admin\AppData\Roaming\12780fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\12780fuck.exe"C:\Users\Admin\AppData\Roaming\12780fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\33422fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\33422fuck.exeC:\Users\Admin\AppData\Roaming\33422fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\33422fuck.exe"C:\Users\Admin\AppData\Roaming\33422fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\33422fuck.exe"C:\Users\Admin\AppData\Roaming\33422fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\33422fuck.exe"C:\Users\Admin\AppData\Roaming\33422fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\33422fuck.exe"C:\Users\Admin\AppData\Roaming\33422fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\33422fuck.exe"C:\Users\Admin\AppData\Roaming\33422fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\15771fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exeC:\Users\Admin\AppData\Roaming\15771fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\31158fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\31158fuck.exeC:\Users\Admin\AppData\Roaming\31158fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\31158fuck.exe"C:\Users\Admin\AppData\Roaming\31158fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\31158fuck.exe"C:\Users\Admin\AppData\Roaming\31158fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\31158fuck.exe"C:\Users\Admin\AppData\Roaming\31158fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\31158fuck.exe"C:\Users\Admin\AppData\Roaming\31158fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\31158fuck.exe"C:\Users\Admin\AppData\Roaming\31158fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\45292fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\45292fuck.exeC:\Users\Admin\AppData\Roaming\45292fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\45292fuck.exe"C:\Users\Admin\AppData\Roaming\45292fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\45292fuck.exe"C:\Users\Admin\AppData\Roaming\45292fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\45292fuck.exe"C:\Users\Admin\AppData\Roaming\45292fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\45292fuck.exe"C:\Users\Admin\AppData\Roaming\45292fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\45292fuck.exe"C:\Users\Admin\AppData\Roaming\45292fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\38100fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\38100fuck.exeC:\Users\Admin\AppData\Roaming\38100fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\38100fuck.exe"C:\Users\Admin\AppData\Roaming\38100fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\38100fuck.exe"C:\Users\Admin\AppData\Roaming\38100fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\38100fuck.exe"C:\Users\Admin\AppData\Roaming\38100fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\38100fuck.exe"C:\Users\Admin\AppData\Roaming\38100fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\38100fuck.exe"C:\Users\Admin\AppData\Roaming\38100fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\44960fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\44960fuck.exeC:\Users\Admin\AppData\Roaming\44960fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\44960fuck.exe"C:\Users\Admin\AppData\Roaming\44960fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\44960fuck.exe"C:\Users\Admin\AppData\Roaming\44960fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\44960fuck.exe"C:\Users\Admin\AppData\Roaming\44960fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\44960fuck.exe"C:\Users\Admin\AppData\Roaming\44960fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\44960fuck.exe"C:\Users\Admin\AppData\Roaming\44960fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\15771fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exeC:\Users\Admin\AppData\Roaming\15771fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\59466fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\59466fuck.exeC:\Users\Admin\AppData\Roaming\59466fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\59466fuck.exe"C:\Users\Admin\AppData\Roaming\59466fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\59466fuck.exe"C:\Users\Admin\AppData\Roaming\59466fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\59466fuck.exe"C:\Users\Admin\AppData\Roaming\59466fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\59466fuck.exe"C:\Users\Admin\AppData\Roaming\59466fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\59466fuck.exe"C:\Users\Admin\AppData\Roaming\59466fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\15771fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exeC:\Users\Admin\AppData\Roaming\15771fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\15771fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exeC:\Users\Admin\AppData\Roaming\15771fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\15771fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exeC:\Users\Admin\AppData\Roaming\15771fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\38100fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\38100fuck.exeC:\Users\Admin\AppData\Roaming\38100fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\38100fuck.exe"C:\Users\Admin\AppData\Roaming\38100fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\38100fuck.exe"C:\Users\Admin\AppData\Roaming\38100fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\38100fuck.exe"C:\Users\Admin\AppData\Roaming\38100fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\38100fuck.exe"C:\Users\Admin\AppData\Roaming\38100fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\38100fuck.exe"C:\Users\Admin\AppData\Roaming\38100fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\82402fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\82402fuck.exeC:\Users\Admin\AppData\Roaming\82402fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\82402fuck.exe"C:\Users\Admin\AppData\Roaming\82402fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\82402fuck.exe"C:\Users\Admin\AppData\Roaming\82402fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\82402fuck.exe"C:\Users\Admin\AppData\Roaming\82402fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\82402fuck.exe"C:\Users\Admin\AppData\Roaming\82402fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\82402fuck.exe"C:\Users\Admin\AppData\Roaming\82402fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\15771fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exeC:\Users\Admin\AppData\Roaming\15771fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\15771fuck.exe"C:\Users\Admin\AppData\Roaming\15771fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\25756fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\25756fuck.exeC:\Users\Admin\AppData\Roaming\25756fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\25756fuck.exe"C:\Users\Admin\AppData\Roaming\25756fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\25756fuck.exe"C:\Users\Admin\AppData\Roaming\25756fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\25756fuck.exe"C:\Users\Admin\AppData\Roaming\25756fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\25756fuck.exe"C:\Users\Admin\AppData\Roaming\25756fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\25756fuck.exe"C:\Users\Admin\AppData\Roaming\25756fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\17198fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\17198fuck.exeC:\Users\Admin\AppData\Roaming\17198fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\17198fuck.exe"C:\Users\Admin\AppData\Roaming\17198fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\17198fuck.exe"C:\Users\Admin\AppData\Roaming\17198fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\17198fuck.exe"C:\Users\Admin\AppData\Roaming\17198fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\17198fuck.exe"C:\Users\Admin\AppData\Roaming\17198fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\17198fuck.exe"C:\Users\Admin\AppData\Roaming\17198fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\82402fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\82402fuck.exeC:\Users\Admin\AppData\Roaming\82402fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\82402fuck.exe"C:\Users\Admin\AppData\Roaming\82402fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\82402fuck.exe"C:\Users\Admin\AppData\Roaming\82402fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\82402fuck.exe"C:\Users\Admin\AppData\Roaming\82402fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\82402fuck.exe"C:\Users\Admin\AppData\Roaming\82402fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\82402fuck.exe"C:\Users\Admin\AppData\Roaming\82402fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\24048fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\24048fuck.exeC:\Users\Admin\AppData\Roaming\24048fuck.exe2⤵
-
C:\Users\Admin\AppData\Roaming\24048fuck.exe"C:\Users\Admin\AppData\Roaming\24048fuck.exe"3⤵
-
C:\Users\Admin\AppData\Roaming\24048fuck.exe"C:\Users\Admin\AppData\Roaming\24048fuck.exe"4⤵
-
C:\Users\Admin\AppData\Roaming\24048fuck.exe"C:\Users\Admin\AppData\Roaming\24048fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\24048fuck.exe"C:\Users\Admin\AppData\Roaming\24048fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data1.dmp5⤵
-
-
C:\Users\Admin\AppData\Roaming\24048fuck.exe"C:\Users\Admin\AppData\Roaming\24048fuck.exe" /scomma C:\Users\Admin\AppData\Local\Temp\data2.dmp5⤵
-
-
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\24048fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\24048fuck.exeC:\Users\Admin\AppData\Roaming\24048fuck.exe2⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\88803fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\88803fuck.exeC:\Users\Admin\AppData\Roaming\88803fuck.exe2⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\68856fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\68856fuck.exeC:\Users\Admin\AppData\Roaming\68856fuck.exe2⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\50475fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\50475fuck.exeC:\Users\Admin\AppData\Roaming\50475fuck.exe2⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\24048fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\24048fuck.exeC:\Users\Admin\AppData\Roaming\24048fuck.exe2⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\50475fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\50475fuck.exeC:\Users\Admin\AppData\Roaming\50475fuck.exe2⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\24048fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\24048fuck.exeC:\Users\Admin\AppData\Roaming\24048fuck.exe2⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\83230fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\83230fuck.exeC:\Users\Admin\AppData\Roaming\83230fuck.exe2⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\88803fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\88803fuck.exeC:\Users\Admin\AppData\Roaming\88803fuck.exe2⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\24048fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\24048fuck.exeC:\Users\Admin\AppData\Roaming\24048fuck.exe2⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\93059fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\93059fuck.exeC:\Users\Admin\AppData\Roaming\93059fuck.exe2⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\33422fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\33422fuck.exeC:\Users\Admin\AppData\Roaming\33422fuck.exe2⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\15771fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exeC:\Users\Admin\AppData\Roaming\15771fuck.exe2⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\12780fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\12780fuck.exeC:\Users\Admin\AppData\Roaming\12780fuck.exe2⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\31158fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\31158fuck.exeC:\Users\Admin\AppData\Roaming\31158fuck.exe2⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\15771fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\15771fuck.exeC:\Users\Admin\AppData\Roaming\15771fuck.exe2⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\38100fuck.exe1⤵
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\45292fuck.exe1⤵
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\44960fuck.exe1⤵
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\62884fuck.exe1⤵
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\59466fuck.exe1⤵
-
C:\Users\Admin\AppData\Roaming\59466fuck.exeC:\Users\Admin\AppData\Roaming\59466fuck.exe2⤵
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\15771fuck.exe1⤵
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\38100fuck.exe1⤵
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\92981fuck.exe1⤵
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\15771fuck.exe1⤵
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\15771fuck.exe1⤵
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\82402fuck.exe1⤵
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\17198fuck.exe1⤵
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\82402fuck.exe1⤵
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\53180fuck.exe1⤵
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\25756fuck.exe1⤵
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\15771fuck.exe1⤵
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\24048fuck.exe1⤵
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\68856fuck.exe1⤵
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\58226fuck.exe1⤵
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
444KB
MD598038b80a340be3f15d2e703c2a2a65d
SHA12b6800b43510660f590b35f68815831f2085ba77
SHA2567a1dd5945a69a7e9c82dbadd5e19b187c017891818ea5b445c6ced1132ec1b1e
SHA5125f6ace3aa4f5533c9eba9d89ffefce177bf6c3327d5766250a3f6cc232a1668fd426016c49ed67bff2b8ff2be8cc35a452c9d0bafdb5064a523e2d5adca4401a
-
Filesize
54B
MD5c10dbeca73f8835240e08e4511284b83
SHA10032f8f941cc07768189ca6ba32b1beede6b6917
SHA2560b6b62094048f0a069b4582f837afcb941db51340d0b16d578e8cbe8603a071e
SHA51234f7ab8b4ab7b4996b82ffc49198103ef245ee7dd5ccfec793a9ee391b9e9bb30bd3916b4ebeaa9c66a4b5ca42f8572418f16dc83d41073bc94389c19916b967
-
Filesize
799KB
MD5b655138dd238886d3a6f88233d13d5d1
SHA1502115893c1bbf3acf6c3cb98feb8404a24308ac
SHA256bb1706071ec13fcd19d0d65274414760565b896f62ac17bf61546774ad0a7d93
SHA5125d2656321005f609652b8903513bed9cc6a9057497231c364a85f34ed508f812f463d311912d1a48c54615eda3f13dc646989a182fbf09f64a4bc8d6c16c983f
-
Filesize
170B
MD50a8f86ce19de5f03effc01fbb7214b48
SHA13e8bcdd9cf19eea57fefd48d122f44823038feb0
SHA2569130d70553854ea49578212accfaf32b8b8c5149fae845ebade41f1c2a22ba68
SHA5128d2f5dee151a41f8cfa7608a83eaf97e7854a4cfb9a49126386f1c0005db038324c800abff309438a65703c179a4bd0a900b7499d973667a09da2cce175ee747
-
Filesize
856KB
-
Filesize
152KB
-
Filesize
152KB
-
Filesize
152KB
-
Filesize
152KB
-
Filesize
124KB
-
Filesize
124KB
-
Filesize
856KB
-
Filesize
856KB
-
Filesize
124KB
-
Filesize
152KB
-
Filesize
152KB
-
Filesize
856KB
-
Filesize
856KB
-
Filesize
152KB
-
Filesize
152KB
-
Filesize
152KB
-
Filesize
152KB
-
Filesize
856KB
-
Filesize
856KB
-
Filesize
856KB
-
Filesize
124KB
-
Filesize
856KB
-
Filesize
124KB
-
Filesize
152KB
-
Filesize
124KB
-
Filesize
856KB
-
Filesize
856KB
-
Filesize
448KB
-
Filesize
448KB
-
Filesize
124KB
-
Filesize
124KB
-
Filesize
856KB
-
Filesize
856KB
-
Filesize
856KB
-
Filesize
856KB
-
Filesize
856KB
-
Filesize
856KB
-
Filesize
856KB
-
Filesize
124KB
-
Filesize
124KB
-
Filesize
856KB
-
Filesize
856KB
-
Filesize
856KB
-
Filesize
856KB
-
Filesize
856KB
-
Filesize
856KB
-
Filesize
856KB
-
Filesize
124KB
-
Filesize
124KB
-
Filesize
856KB
-
Filesize
856KB
-
Filesize
152KB
-
Filesize
152KB
-
Filesize
856KB
-
Filesize
856KB
-
Filesize
856KB
-
Filesize
856KB
-
Filesize
856KB
-
Filesize
856KB
-
Filesize
124KB
-
Filesize
124KB
-
Filesize
124KB
-
Filesize
124KB
-
Filesize
856KB
-
Filesize
856KB
-
Filesize
124KB
-
Filesize
152KB
-
Filesize
856KB
-
Filesize
856KB
-
Filesize
380KB
-
Filesize
380KB
-
Filesize
380KB
-
Filesize
856KB
-
Filesize
856KB
-
Filesize
152KB
-
Filesize
124KB
-
Filesize
856KB
-
Filesize
856KB
-
Filesize
856KB
-
Filesize
856KB
-
Filesize
124KB
-
Filesize
124KB
-
Filesize
856KB
-
Filesize
856KB
-
Filesize
856KB
-
Filesize
856KB
-
Filesize
856KB
-
Filesize
856KB
-
Filesize
152KB
-
Filesize
336KB
-
Filesize
336KB
-
Filesize
336KB
-
Filesize
856KB
-
Filesize
152KB
-
Filesize
124KB
-
Filesize
856KB
-
Filesize
856KB
-
Filesize
856KB
-
Filesize
152KB
-
Filesize
152KB
-
Filesize
856KB
-
Filesize
856KB
-
Filesize
856KB
-
Filesize
856KB
-
Filesize
152KB
-
Filesize
152KB
-
Filesize
152KB
-
Filesize
152KB
-
Filesize
152KB