851eaf97fbe45e52f7a6f9afd5626058b7d5f06a03b57bc5ce85215e55577913

Analysis

max time kernel
149s
max time network
124s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
22/10/2026, 17:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
hellonoobie.bat
Size 9KB
Sample261022-vrld4aws8j
SHA256 851eaf97fbe45e52f7a6f9afd5626058b7d5f06a03b57bc5ce85215e55577913
MD5 ea6505e21ab95353d1752e74a5d63fb4
SHA1 1a2cbfea9fe3f33f544c742eff03038174a698a0
SHA512 59e3aaa9263847580967d0d17548e1152eda120261ae9f45bc26d05a51ba7953b91b483bdb933972872097a4d5f3b4b8c606abcadee392bf4723d6d1a483b447
SSDEEP 96:c3tttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttl:y
TLSH
T14312134BA42F84D2D4D3DB2569B53D607112D6E1CC1E4F4A420E2CB52CC6AD5B0C75E5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

execution

Malware Config

Signatures

Badlisted process makes network request 3 IoCs

Network request originating from process or tool commonly abused by malware.

flow	pid	Process
25	6084	Process not Found
26	6084	Process not Found
28	6084	Process not Found

Executes a command shell one-liner 1 TTPs 64 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
2444	cmd.exe
7064	cmd.exe
6900	cmd.exe
4528	cmd.exe
2860	Process not Found
828	Process not Found
9696	Process not Found
6368	Process not Found
220	cmd.exe
8576	cmd.exe
4948	cmd.exe
11024	cmd.exe
9364	Process not Found
6384	Process not Found
8600	Process not Found
4476	cmd.exe
8792	Process not Found
2804	Process not Found
8188	Process not Found
10776	Process not Found
6308	Process not Found
4508	Process not Found
3740	cmd.exe
8792	cmd.exe
12132	Process not Found
1200	cmd.exe
7548	cmd.exe
2372	cmd.exe
1856	cmd.exe
12116	cmd.exe
11248	Process not Found
2344	cmd.exe
5216	cmd.exe
1672	cmd.exe
6924	cmd.exe
8272	cmd.exe
12004	Process not Found
11920	Process not Found
1432	Process not Found
8128	Process not Found
11344	Process not Found
5112	Process not Found
10856	Process not Found
7080	cmd.exe
4552	cmd.exe
5644	cmd.exe
7244	Process not Found
4552	Process not Found
10016	Process not Found
1804	cmd.exe
2488	cmd.exe
4852	cmd.exe
3684	cmd.exe
9100	Process not Found
12244	Process not Found
536	Process not Found
1288	Process not Found
6224	cmd.exe
4360	cmd.exe
5072	cmd.exe
3860	Process not Found
4680	Process not Found
9708	Process not Found
12008	Process not Found

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4764 wrote to memory of 1780	4764	cmd.exe	86
PID 4764 wrote to memory of 1696	4764	cmd.exe	88
PID 4764 wrote to memory of 5884	4764	cmd.exe	90
PID 4764 wrote to memory of 3720	4764	cmd.exe	91
PID 4764 wrote to memory of 796	4764	cmd.exe	92
PID 4764 wrote to memory of 640	4764	cmd.exe	93
PID 4764 wrote to memory of 5580	4764	cmd.exe	94
PID 4764 wrote to memory of 2912	4764	cmd.exe	95
PID 4764 wrote to memory of 3792	4764	cmd.exe	102
PID 4764 wrote to memory of 3896	4764	cmd.exe	104
PID 4764 wrote to memory of 5900	4764	cmd.exe	106
PID 4764 wrote to memory of 4224	4764	cmd.exe	107
PID 4764 wrote to memory of 5728	4764	cmd.exe	110
PID 4764 wrote to memory of 392	4764	cmd.exe	111
PID 4764 wrote to memory of 5192	4764	cmd.exe	112
PID 4764 wrote to memory of 6016	4764	cmd.exe	116
PID 4764 wrote to memory of 5012	4764	cmd.exe	118
PID 4764 wrote to memory of 4920	4764	cmd.exe	119
PID 4764 wrote to memory of 3596	4764	cmd.exe	122
PID 4764 wrote to memory of 4248	4764	cmd.exe	124
PID 4764 wrote to memory of 4320	4764	cmd.exe	126
PID 4764 wrote to memory of 1468	4764	cmd.exe	128
PID 4764 wrote to memory of 1996	4764	cmd.exe	130
PID 4764 wrote to memory of 2016	4764	cmd.exe	131
PID 4764 wrote to memory of 3904	4764	cmd.exe	132
PID 4764 wrote to memory of 4836	4764	cmd.exe	133
PID 4764 wrote to memory of 2140	4764	cmd.exe	134
PID 4764 wrote to memory of 5224	4764	cmd.exe	135
PID 4764 wrote to memory of 5232	4764	cmd.exe	136
PID 4764 wrote to memory of 4192	4764	cmd.exe	312
PID 4764 wrote to memory of 4464	4764	cmd.exe	140
PID 4764 wrote to memory of 1108	4764	cmd.exe	143
PID 4764 wrote to memory of 5980	4764	cmd.exe	145
PID 4764 wrote to memory of 2104	4764	cmd.exe	148
PID 4764 wrote to memory of 4696	4764	cmd.exe	326
PID 4764 wrote to memory of 6056	4764	cmd.exe	151
PID 4764 wrote to memory of 3384	4764	cmd.exe	152
PID 4764 wrote to memory of 5824	4764	cmd.exe	154
PID 4764 wrote to memory of 3440	4764	cmd.exe	156
PID 4764 wrote to memory of 1636	4764	cmd.exe	355
PID 4764 wrote to memory of 2644	4764	cmd.exe	159
PID 4764 wrote to memory of 1268	4764	cmd.exe	160
PID 4764 wrote to memory of 4440	4764	cmd.exe	161
PID 4764 wrote to memory of 2668	4764	cmd.exe	162
PID 4764 wrote to memory of 1804	4764	cmd.exe	163
PID 4764 wrote to memory of 2272	4764	cmd.exe	166
PID 4764 wrote to memory of 4680	4764	cmd.exe	167
PID 4764 wrote to memory of 6052	4764	cmd.exe	361
PID 4764 wrote to memory of 4316	4764	cmd.exe	170
PID 4764 wrote to memory of 1160	4764	cmd.exe	408
PID 4764 wrote to memory of 3204	4764	cmd.exe	173
PID 4764 wrote to memory of 4104	4764	cmd.exe	175
PID 4764 wrote to memory of 4944	4764	cmd.exe	177
PID 4764 wrote to memory of 4496	4764	cmd.exe	448
PID 4764 wrote to memory of 2940	4764	cmd.exe	179
PID 4764 wrote to memory of 2452	4764	cmd.exe	181
PID 4764 wrote to memory of 5096	4764	cmd.exe	183
PID 4764 wrote to memory of 4444	4764	cmd.exe	578
PID 4764 wrote to memory of 3728	4764	cmd.exe	187
PID 4764 wrote to memory of 2200	4764	cmd.exe	190
PID 4764 wrote to memory of 540	4764	cmd.exe	191
PID 4764 wrote to memory of 916	4764	cmd.exe	192
PID 4764 wrote to memory of 4168	4764	cmd.exe	194
PID 4764 wrote to memory of 1868	4764	cmd.exe	196

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\hellonoobie.bat"
1⤵
- Suspicious use of WriteProcessMemory
PID:4764
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:1780
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:1696
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5884
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:3720
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:796
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:640
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5580
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:2912
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:3792
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:3896
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5900
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4224
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5728
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:392
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5192
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6016
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5012
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4920
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:3596
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4248
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4320
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:1468
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:1996
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:2016
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:3904
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4836
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:2140
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5224
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5232
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4192
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4464
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:1108
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5980
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:2104
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4696
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6056
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:3384
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5824
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:3440
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:1636
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:2644
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:1268
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4440
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:2668
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  - Executes a command shell one-liner
  PID:1804
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:2272
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4680
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6052
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4316
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:1160
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:3204
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4104
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4944
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4496
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:2940
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:2452
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5096
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4444
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:3728
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:2200
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:540
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:916
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4168
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:1868
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:2300
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5288
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4400
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4200
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:2292
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:3808
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:3376
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4988
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5308
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5264
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:3920
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:3296
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:3880
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5788
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5364
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4804
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5272
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4328
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:2288
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5248
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  - Executes a command shell one-liner
  PID:2444
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:2176
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:1968
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6116
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:2708
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:3124
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:416
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:1188
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4984
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5748
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5820
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:3276
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:1952
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4844
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:3016
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6132
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:3724
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4568
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5052
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6204
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6916
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6992
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7020
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7044
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  - Executes a command shell one-liner
  PID:7064
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  - Executes a command shell one-liner
  PID:7080
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7096
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7124
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7132
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7156
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4320
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4192
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6312
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6020
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5276
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:224
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4696
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:1420
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4112
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5060
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4664
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5720
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:116
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  - Executes a command shell one-liner
  PID:220
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:2292
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:3732
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5912
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4588
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5004
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5952
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:2252
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6248
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:1636
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5228
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4788
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5564
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6052
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6880
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:6204
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6472
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6364
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:3328
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:800
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:5052
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6396
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:620
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6948
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6188
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:3796
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:3264
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6448
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5036
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6456
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5688
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4016
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6616
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:1764
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:1160
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:3180
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:2156
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6704
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:1672
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4816
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6172
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6708
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6168
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6956
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:2240
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6756
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6744
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6612
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4032
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6636
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6592
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4948
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:2544
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:4804
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:2300
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:3808
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6656
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6664
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:1640
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5592
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:2056
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:3360
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:3724
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6016
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5540
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5992
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  - Executes a command shell one-liner
  PID:4360
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:4984
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6568
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4496
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5344
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4056
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  - Executes a command shell one-liner
  PID:6900
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:1104
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:1696
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6976
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:2660
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:1792
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6272
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4348
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5652
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5184
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5696
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:3500
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6280
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:2164
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5984
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  - Executes a command shell one-liner
  PID:6224
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  - Executes a command shell one-liner
  PID:2344
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6220
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:1192
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:2688
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:2464
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4216
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4596
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:1800
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:3348
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6040
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6080
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4528
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6004
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5656
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4196
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5100
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6264
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:1752
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4928
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4228
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:3784
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:2484
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:1968
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:4444
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4616
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  - Executes a command shell one-liner
  PID:1200
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5256
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6260
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:380
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:3076
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6008
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5216
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:4664
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:3720
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5772
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4960
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:3236
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:1460
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4364
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:1176
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:2124
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5980
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6916
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5664
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7052
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:5308
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4832
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7016
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4220
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:3440
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:1268
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6148
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5384
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:432
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5636
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4412
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:1980
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  - Executes a command shell one-liner
  PID:3740
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7196
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7224
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7260
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7288
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7356
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7420
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8812
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:9060
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:9088
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:9136
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:9164
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:9172
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:9180
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7412
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6172
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:2368
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:2176
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7492
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6528
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8372
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8364
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7012
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:4816
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:2292
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5132
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7844
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8088
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8304
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5792
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4780
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  - Executes a command shell one-liner
  PID:7548
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4284
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:2772
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4828
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:816
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6760
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:2908
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7200
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:3796
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8668
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:2064
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4228
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4968
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5504
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:3328
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:3760
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7540
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8724
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8684
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:2416
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4684
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:916
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6608
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:2500
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:3696
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7196
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7876
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:3428
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7864
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6672
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:1456
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5232
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:1332
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6468
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6940
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:2312
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4484
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5396
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4032
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:4496
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6784
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6288
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7380
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7936
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8828
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8168
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5616
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  - Executes a command shell one-liner
  PID:5216
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:3516
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6872
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7968
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8344
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5248
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5640
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7016
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7264
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8456
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4524
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8212
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:1288
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6828
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5256
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:1764
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:1316
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  - Executes a command shell one-liner
  PID:1672
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:2660
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6424
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:1188
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:224
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:1468
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6064
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:1096
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:7080
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5088
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:9040
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:1040
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5728
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:9048
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6364
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:6040
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4068
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:3728
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6876
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7352
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6832
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  - Executes a command shell one-liner
  PID:5072
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:3288
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:5564
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4604
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:5276
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5620
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7324
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4092
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7004
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4812
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4588
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:2376
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4996
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5908
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7164
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:4364
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7148
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  - Executes a command shell one-liner
  PID:4552
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4648
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7260
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6652
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5884
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:3948
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8256
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8160
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:9136
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6700
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8232
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4832
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7460
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4132
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:3152
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7696
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7076
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:6456
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8724
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8060
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:904
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6172
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7500
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8668
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7728
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4056
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:3896
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:5184
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4908
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4416
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5936
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:432
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6888
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7284
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5972
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7832
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7924
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6676
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4584
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6816
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:620
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7508
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:1996
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4456
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6240
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:4696
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:2544
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:1176
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:3984
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8876
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5516
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7720
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8556
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4452
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:3500
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:5232
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8588
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:9000
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6720
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8428
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4420
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:2368
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7064
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:3276
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4928
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4320
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4228
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8532
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4440
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8904
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:2312
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8320
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  - Executes a command shell one-liner
  PID:2488
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8360
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7024
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:3340
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8912
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:2968
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5372
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8444
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8148
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:1764
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6448
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6512
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:1420
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5680
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:1672
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  - Executes a command shell one-liner
  PID:4476
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5108
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:3332
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:1952
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:4348
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  - Executes a command shell one-liner
  PID:8576
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:1664
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8592
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7344
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7624
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  - Executes a command shell one-liner
  PID:4852
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:2736
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8404
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:1620
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:3252
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8012
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:9016
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:2328
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8000
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:6424
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6532
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7472
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8032
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5256
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:5912
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7432
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:6992
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:9008
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6656
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:3656
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8752
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:3264
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  - Executes a command shell one-liner
  PID:2372
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:9020
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:9060
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4604
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4580
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:2160
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5928
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5740
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:5228
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8952
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4812
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:9208
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6372
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7180
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6900
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:1704
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:9168
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7460
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7944
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:9172
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8872
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5036
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7672
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:5384
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8304
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:816
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:5100
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8100
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  - Executes a command shell one-liner
  PID:1856
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5688
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  - Executes a command shell one-liner
  PID:3684
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6736
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5352
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:2836
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:2772
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:1260
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:1696
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7588
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:4420
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6648
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:2356
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4112
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:2064
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7932
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8876
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8348
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7700
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:3516
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7728
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8900
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8864
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:5992
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5636
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6180
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  - Executes a command shell one-liner
  PID:8272
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5208
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8608
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:5504
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:2304
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5668
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5684
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:1432
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:2368
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:3688
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4484
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8692
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8584
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:9000
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8284
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6296
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6164
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6872
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7300
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:3472
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8640
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4988
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  - Executes a command shell one-liner
  PID:4948
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7196
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7396
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7132
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7204
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:1236
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8496
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5068
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6800
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7516
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7400
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:5980
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8588
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7688
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:5248
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4576
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8188
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:2480
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:3076
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7948
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8276
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:2484
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4696
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:3272
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4776
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7064
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7512
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:6188
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:1452
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:3468
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8112
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8020
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:1780
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8392
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:1872
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6516
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4228
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8356
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:4056
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  - Executes a command shell one-liner
  PID:6924
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:6664
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4252
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:6816
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7716
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4600
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5216
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6236
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:6756
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6260
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5396
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7776
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:224
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4660
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8068
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:3724
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:1812
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:3160
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8528
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:1300
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6268
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5716
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:3060
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8596
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4524
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:7936
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6888
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:6016
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:2908
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:2888
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:536
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8716
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5732
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6288
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4024
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6948
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5080
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7524
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:6224
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5516
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7532
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:1668
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8432
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4928
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4456
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:7224
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8672
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7720
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:3240
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5176
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:6784
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5888
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7280
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6760
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6676
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8136
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:1108
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8556
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:3932
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6752
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6108
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7984
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:2264
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:2712
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:7260
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7056
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:2164
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4124
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  - Executes a command shell one-liner
  PID:4528
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:1980
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7744
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:9784
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:9868
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:9908
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:9932
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:9948
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:9956
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:9976
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:10024
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:10044
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:10064
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:10088
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:10104
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:10120
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:10128
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:10148
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:10168
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:10180
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:10200
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:10224
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:9852
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:10244
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:10268
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:10276
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:10292
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:10304
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:10312
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:10336
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:10344
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:10352
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:10360
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:10368
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:10376
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:10384
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:10392
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:10404
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:10428
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:10444
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:10460
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:10480
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:10508
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:10524
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:10540
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:10556
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:10576
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:10588
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:10608
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:10624
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:10644
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:10664
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:10696
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:10716
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:10732
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:10764
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:10788
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:10816
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:10828
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:10848
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:10864
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:10884
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:10904
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:10928
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4656
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8052
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:1980
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8988
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:6148
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6632
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6652
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8940
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6556
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:9124
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4604
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:2156
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  - Executes a command shell one-liner
  PID:5644
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7492
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8800
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6700
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:9688
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8024
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:9556
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:7948
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:12068
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7256
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:12080
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6660
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:9972
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:10320
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:12104
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:4484
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:12112
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  - Executes a command shell one-liner
  PID:12116
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:1792
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8164
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:9740
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:9096
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6280
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7520
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8424
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8244
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8728
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:9380
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:9700
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4984
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:1996
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6792
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8124
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:3756
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:9720
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4960
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:9592
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:3504
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:2604
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:9788
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:6828
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5824
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8368
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:1116
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4328
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:2272
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7164
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:3784
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7660
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:9428
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8908
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7296
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6196
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7652
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7236
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:9756
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6296
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:12192
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:9452
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5036
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7280
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:4596
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8640
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:1752
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8048
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:3468
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7352
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:1332
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:9584
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:3740
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:9272
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6152
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:12200
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:9444
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4976
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4356
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:9140
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7688
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8356
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:4412
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:9476
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6584
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5632
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8600
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:9888
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:3348
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:10084
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:9992
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:9876
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:9796
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:9624
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6032
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4840
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7428
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:9540
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8660
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:9536
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:9588
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5072
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6360
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:6080
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7924
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:9512
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5708
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8608
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7704
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7392
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:7260
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8720
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4900
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7828
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:3848
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:956
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4252
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:3792
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8808
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:9940
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7400
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7544
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:7016
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6904
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:10824
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:9872
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:11432
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:10652
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8108
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4804
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:10448
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:12020
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:10456
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:8828
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:10272
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  - Executes a command shell one-liner
  PID:11024
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:3708
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7540
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:11200
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:11952
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6124
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:2488
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:12096
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:10464
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:11940
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:10396
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:10820
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:11068
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6932
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6388
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  - Executes a command shell one-liner
  PID:8792
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:10392
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6136
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4460
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:12160
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7116
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:11052
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8868
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:12048
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8212
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:10716
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:10760
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:12176
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:9976
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:12276
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:11244
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:10548
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:9176
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:10912
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:12220
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:10556
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:11392
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6952
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:10436
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:11088
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:7844
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:11256
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7928
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:11436
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:11684
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:10844
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:12152
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:10072
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:11188
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:2620
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4068
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:11596
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6064
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:10664
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7888
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4300
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:11656
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:10748
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:10920
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:11536
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:5616
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:11424
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:11796
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7212
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:11172
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:11840
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:11252
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:11764
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:10684
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:10728
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:6260
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:11880
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5384
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5832
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:3728
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4464
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8052
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8004
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:9752
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:6652
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:9480
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5220
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:12092
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:3844
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:9840
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8844
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8688
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:9252
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:9468
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:9652
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:10004
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:2164
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6500
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:9944
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:9548
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:5548
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7120
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:8160
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:2244
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:9052
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:6832
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:9248
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:7944
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:6836
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:1264
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:3148
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:4132
- C:\Windows\system32\cmd.exe
  cmd.exe /c "echo YOU HAVE BEEN SNIPED BY SPIDER"
  2⤵
  PID:4928

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads