Overview

overview

7

Static

static

3

2026-07-14...om.exe

windows10-2004-x64

7

2026-07-14...om.exe

windows11-ltsc_2024-x64

7

Analysis

  • max time kernel
    92s
  • max time network
    114s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    14/07/2026, 22:27

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
  • Size 17.6MB
  • Sample260714-2dbfasey6l
  • SHA256 f476e81be13a89b3395550b13b967193aa8588f8d4bf35e335551c56313dcc28
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:6024
    • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
      "C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe"
      2⤵
      • Loads dropped DLL
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:1196
      • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
        C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
        3⤵
        • Loads dropped DLL
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of WriteProcessMemory
        PID:2520
        • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
          C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
          4⤵
          • Loads dropped DLL
          • Suspicious use of AdjustPrivilegeToken
          • Suspicious use of WriteProcessMemory
          PID:3908
          • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
            C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
            5⤵
            • Suspicious use of AdjustPrivilegeToken
            • Suspicious use of WriteProcessMemory
            PID:3484
            • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
              C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
              6⤵
              • Suspicious use of AdjustPrivilegeToken
              • Suspicious use of WriteProcessMemory
              PID:1908
              • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                7⤵
                • Suspicious use of AdjustPrivilegeToken
                • Suspicious use of WriteProcessMemory
                PID:3264
                • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                  C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                  8⤵
                  • Suspicious use of AdjustPrivilegeToken
                  • Suspicious use of WriteProcessMemory
                  PID:2932
                  • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                    C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                    9⤵
                    • Suspicious use of AdjustPrivilegeToken
                    • Suspicious use of WriteProcessMemory
                    PID:5920
                    • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                      C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                      10⤵
                      • Suspicious use of AdjustPrivilegeToken
                      • Suspicious use of WriteProcessMemory
                      PID:3920
                      • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                        C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                        11⤵
                        • Suspicious use of AdjustPrivilegeToken
                        • Suspicious use of WriteProcessMemory
                        PID:5076
                        • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                          C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                          12⤵
                          • Suspicious use of AdjustPrivilegeToken
                          • Suspicious use of WriteProcessMemory
                          PID:2756
                          • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                            C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                            13⤵
                            • Suspicious use of AdjustPrivilegeToken
                            • Suspicious use of WriteProcessMemory
                            PID:2824
                            • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                              C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                              14⤵
                              • Suspicious use of AdjustPrivilegeToken
                              • Suspicious use of WriteProcessMemory
                              PID:4320
                              • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                15⤵
                                • Suspicious use of AdjustPrivilegeToken
                                • Suspicious use of WriteProcessMemory
                                PID:4920
                                • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                  C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                  16⤵
                                  • Suspicious use of AdjustPrivilegeToken
                                  • Suspicious use of WriteProcessMemory
                                  PID:1396
                                  • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                    C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                    17⤵
                                    • Suspicious use of AdjustPrivilegeToken
                                    • Suspicious use of WriteProcessMemory
                                    PID:3444
                                    • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                      C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                      18⤵
                                      • Suspicious use of AdjustPrivilegeToken
                                      • Suspicious use of WriteProcessMemory
                                      PID:624
                                      • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                        C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                        19⤵
                                        • Suspicious use of AdjustPrivilegeToken
                                        • Suspicious use of WriteProcessMemory
                                        PID:2164
                                        • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                          C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                          20⤵
                                          • Suspicious use of AdjustPrivilegeToken
                                          • Suspicious use of WriteProcessMemory
                                          PID:3332
                                          • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                            C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                            21⤵
                                            • Suspicious use of AdjustPrivilegeToken
                                            • Suspicious use of WriteProcessMemory
                                            PID:4404
                                            • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                              C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                              22⤵
                                              • Suspicious use of AdjustPrivilegeToken
                                              • Suspicious use of WriteProcessMemory
                                              PID:5080
                                              • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                23⤵
                                                • Suspicious use of AdjustPrivilegeToken
                                                • Suspicious use of WriteProcessMemory
                                                PID:1868
                                                • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                  C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                  24⤵
                                                  • Suspicious use of AdjustPrivilegeToken
                                                  • Suspicious use of WriteProcessMemory
                                                  PID:3584
                                                  • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                    C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                    25⤵
                                                    • Suspicious use of AdjustPrivilegeToken
                                                    • Suspicious use of WriteProcessMemory
                                                    PID:2620
                                                    • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                      C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                      26⤵
                                                      • Suspicious use of AdjustPrivilegeToken
                                                      • Suspicious use of WriteProcessMemory
                                                      PID:2272
                                                      • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                        C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                        27⤵
                                                        • Suspicious use of AdjustPrivilegeToken
                                                        • Suspicious use of WriteProcessMemory
                                                        PID:4296
                                                        • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                          C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                          28⤵
                                                          • Suspicious use of AdjustPrivilegeToken
                                                          • Suspicious use of WriteProcessMemory
                                                          PID:5856
                                                          • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                            C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                            29⤵
                                                            • Suspicious use of AdjustPrivilegeToken
                                                            • Suspicious use of WriteProcessMemory
                                                            PID:2312
                                                            • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                              C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                              30⤵
                                                              • Suspicious use of AdjustPrivilegeToken
                                                              • Suspicious use of WriteProcessMemory
                                                              PID:4336
                                                              • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                31⤵
                                                                • Suspicious use of AdjustPrivilegeToken
                                                                • Suspicious use of WriteProcessMemory
                                                                PID:4880
                                                                • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                  C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                  32⤵
                                                                  • Suspicious use of AdjustPrivilegeToken
                                                                  • Suspicious use of WriteProcessMemory
                                                                  PID:200
                                                                  • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                    C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                    33⤵
                                                                    • Suspicious use of AdjustPrivilegeToken
                                                                    • Suspicious use of WriteProcessMemory
                                                                    PID:1892
                                                                    • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                      C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                      34⤵
                                                                      • Suspicious use of AdjustPrivilegeToken
                                                                      • Suspicious use of WriteProcessMemory
                                                                      PID:2460
                                                                      • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                        C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                        35⤵
                                                                        • Suspicious use of AdjustPrivilegeToken
                                                                        • Suspicious use of WriteProcessMemory
                                                                        PID:3248
                                                                        • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                          C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                          36⤵
                                                                          • Suspicious use of AdjustPrivilegeToken
                                                                          • Suspicious use of WriteProcessMemory
                                                                          PID:5752
                                                                          • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                            C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                            37⤵
                                                                            • Suspicious use of AdjustPrivilegeToken
                                                                            • Suspicious use of WriteProcessMemory
                                                                            PID:2736
                                                                            • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                              C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                              38⤵
                                                                              • Suspicious use of AdjustPrivilegeToken
                                                                              • Suspicious use of WriteProcessMemory
                                                                              PID:5692
                                                                              • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                39⤵
                                                                                • Suspicious use of AdjustPrivilegeToken
                                                                                • Suspicious use of WriteProcessMemory
                                                                                PID:6076
                                                                                • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                  C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                  40⤵
                                                                                  • Suspicious use of AdjustPrivilegeToken
                                                                                  • Suspicious use of WriteProcessMemory
                                                                                  PID:2836
                                                                                  • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                    C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                    41⤵
                                                                                    • Suspicious use of AdjustPrivilegeToken
                                                                                    • Suspicious use of WriteProcessMemory
                                                                                    PID:5548
                                                                                    • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                      C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                      42⤵
                                                                                      • Suspicious use of AdjustPrivilegeToken
                                                                                      • Suspicious use of WriteProcessMemory
                                                                                      PID:1480
                                                                                      • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                        C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                        43⤵
                                                                                        • Suspicious use of AdjustPrivilegeToken
                                                                                        • Suspicious use of WriteProcessMemory
                                                                                        PID:3092
                                                                                        • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                          C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                          44⤵
                                                                                          • Suspicious use of AdjustPrivilegeToken
                                                                                          • Suspicious use of WriteProcessMemory
                                                                                          PID:2108
                                                                                          • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                            C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                            45⤵
                                                                                            • Suspicious use of AdjustPrivilegeToken
                                                                                            • Suspicious use of WriteProcessMemory
                                                                                            PID:5720
                                                                                            • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                              C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                              46⤵
                                                                                              • Suspicious use of AdjustPrivilegeToken
                                                                                              • Suspicious use of WriteProcessMemory
                                                                                              PID:2900
                                                                                              • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                47⤵
                                                                                                • Suspicious use of AdjustPrivilegeToken
                                                                                                • Suspicious use of WriteProcessMemory
                                                                                                PID:3060
                                                                                                • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                  C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                  48⤵
                                                                                                  • Suspicious use of AdjustPrivilegeToken
                                                                                                  • Suspicious use of WriteProcessMemory
                                                                                                  PID:6204
                                                                                                  • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                    C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                    49⤵
                                                                                                    • Suspicious use of AdjustPrivilegeToken
                                                                                                    • Suspicious use of WriteProcessMemory
                                                                                                    PID:6280
                                                                                                    • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                      C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                      50⤵
                                                                                                      • Suspicious use of AdjustPrivilegeToken
                                                                                                      • Suspicious use of WriteProcessMemory
                                                                                                      PID:6356
                                                                                                      • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                        C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                        51⤵
                                                                                                        • Suspicious use of AdjustPrivilegeToken
                                                                                                        • Suspicious use of WriteProcessMemory
                                                                                                        PID:6472
                                                                                                        • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                          C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                          52⤵
                                                                                                          • Suspicious use of AdjustPrivilegeToken
                                                                                                          • Suspicious use of WriteProcessMemory
                                                                                                          PID:6552
                                                                                                          • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                            C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                            53⤵
                                                                                                            • Suspicious use of AdjustPrivilegeToken
                                                                                                            • Suspicious use of WriteProcessMemory
                                                                                                            PID:6640
                                                                                                            • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                              C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                              54⤵
                                                                                                              • Suspicious use of AdjustPrivilegeToken
                                                                                                              • Suspicious use of WriteProcessMemory
                                                                                                              PID:6716
                                                                                                              • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                55⤵
                                                                                                                • Suspicious use of AdjustPrivilegeToken
                                                                                                                • Suspicious use of WriteProcessMemory
                                                                                                                PID:6792
                                                                                                                • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                  C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                  56⤵
                                                                                                                  • Suspicious use of AdjustPrivilegeToken
                                                                                                                  • Suspicious use of WriteProcessMemory
                                                                                                                  PID:6872
                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                    C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                    57⤵
                                                                                                                    • Suspicious use of AdjustPrivilegeToken
                                                                                                                    • Suspicious use of WriteProcessMemory
                                                                                                                    PID:6948
                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                      C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                      58⤵
                                                                                                                      • Suspicious use of AdjustPrivilegeToken
                                                                                                                      • Suspicious use of WriteProcessMemory
                                                                                                                      PID:7024
                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                        C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                        59⤵
                                                                                                                        • Suspicious use of AdjustPrivilegeToken
                                                                                                                        • Suspicious use of WriteProcessMemory
                                                                                                                        PID:7100
                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                          C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                          60⤵
                                                                                                                          • Suspicious use of AdjustPrivilegeToken
                                                                                                                          • Suspicious use of WriteProcessMemory
                                                                                                                          PID:6176
                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                            C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                            61⤵
                                                                                                                            • Suspicious use of AdjustPrivilegeToken
                                                                                                                            • Suspicious use of WriteProcessMemory
                                                                                                                            PID:6376
                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                              C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                              62⤵
                                                                                                                              • Suspicious use of AdjustPrivilegeToken
                                                                                                                              • Suspicious use of WriteProcessMemory
                                                                                                                              PID:6468
                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                63⤵
                                                                                                                                • Suspicious use of AdjustPrivilegeToken
                                                                                                                                • Suspicious use of WriteProcessMemory
                                                                                                                                PID:4372
                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                  C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                  64⤵
                                                                                                                                  • Suspicious use of AdjustPrivilegeToken
                                                                                                                                  • Suspicious use of WriteProcessMemory
                                                                                                                                  PID:6696
                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                    C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                    65⤵
                                                                                                                                    • Suspicious use of AdjustPrivilegeToken
                                                                                                                                    PID:6944
                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                      C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                      66⤵
                                                                                                                                        PID:7088
                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                          C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                          67⤵
                                                                                                                                            PID:6320
                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                              C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                              68⤵
                                                                                                                                                PID:6484
                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                  C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                  69⤵
                                                                                                                                                    PID:6836
                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                      C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                      70⤵
                                                                                                                                                        PID:2688
                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                          C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                          71⤵
                                                                                                                                                            PID:5064
                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                              C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                              72⤵
                                                                                                                                                                PID:7112
                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                  C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                  73⤵
                                                                                                                                                                    PID:4548
                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                      C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                      74⤵
                                                                                                                                                                        PID:7200
                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                          C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                          75⤵
                                                                                                                                                                            PID:7284
                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                              C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                              76⤵
                                                                                                                                                                                PID:7376
                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                  C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                  77⤵
                                                                                                                                                                                    PID:7456
                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                      C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                      78⤵
                                                                                                                                                                                        PID:7532
                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                          C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                          79⤵
                                                                                                                                                                                            PID:7608
                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                              C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                              80⤵
                                                                                                                                                                                                PID:7688
                                                                                                                                                                                                • C:\Windows\system32\cmd.exe
                                                                                                                                                                                                  C:\Windows\system32\cmd.exe /c "ver"
                                                                                                                                                                                                  81⤵
                                                                                                                                                                                                    PID:7756
                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                    C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                    81⤵
                                                                                                                                                                                                      PID:7768
                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                        C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                        82⤵
                                                                                                                                                                                                          PID:7844
                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                            C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                            83⤵
                                                                                                                                                                                                              PID:7920
                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                84⤵
                                                                                                                                                                                                                  PID:7996
                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                    C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                    85⤵
                                                                                                                                                                                                                      PID:8072
                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                        C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                        86⤵
                                                                                                                                                                                                                          PID:8148
                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                            C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                            87⤵
                                                                                                                                                                                                                              PID:3340
                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                88⤵
                                                                                                                                                                                                                                  PID:7264
                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                    C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                    89⤵
                                                                                                                                                                                                                                      PID:5632
                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                        C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                        90⤵
                                                                                                                                                                                                                                          PID:7708
                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                            C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                            91⤵
                                                                                                                                                                                                                                              PID:7856
                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                92⤵
                                                                                                                                                                                                                                                  PID:600
                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                    C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                    93⤵
                                                                                                                                                                                                                                                      PID:7188
                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                        C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                        94⤵
                                                                                                                                                                                                                                                          PID:7516
                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                            C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                            95⤵
                                                                                                                                                                                                                                                              PID:7780
                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                96⤵
                                                                                                                                                                                                                                                                  PID:7912
                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                    C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                    97⤵
                                                                                                                                                                                                                                                                      PID:7808
                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                        C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                        98⤵
                                                                                                                                                                                                                                                                          PID:1956
                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                            C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                            99⤵
                                                                                                                                                                                                                                                                              PID:8216
                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                100⤵
                                                                                                                                                                                                                                                                                  PID:8292
                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                    C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                    101⤵
                                                                                                                                                                                                                                                                                      PID:8368
                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                        C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                        102⤵
                                                                                                                                                                                                                                                                                          PID:8444
                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                            C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                            103⤵
                                                                                                                                                                                                                                                                                              PID:8520
                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                104⤵
                                                                                                                                                                                                                                                                                                  PID:8596
                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                    C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                    105⤵
                                                                                                                                                                                                                                                                                                      PID:8672
                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                        C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                        106⤵
                                                                                                                                                                                                                                                                                                          PID:8748
                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                            C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                            107⤵
                                                                                                                                                                                                                                                                                                              PID:8824
                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                108⤵
                                                                                                                                                                                                                                                                                                                  PID:8900
                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                    C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                    109⤵
                                                                                                                                                                                                                                                                                                                      PID:8976
                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                        C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                        110⤵
                                                                                                                                                                                                                                                                                                                          PID:9052
                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                            C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                            111⤵
                                                                                                                                                                                                                                                                                                                              PID:9128
                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                112⤵
                                                                                                                                                                                                                                                                                                                                  PID:9204
                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                    C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                    113⤵
                                                                                                                                                                                                                                                                                                                                      PID:8352
                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                        C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                        114⤵
                                                                                                                                                                                                                                                                                                                                          PID:8504
                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                            C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                            115⤵
                                                                                                                                                                                                                                                                                                                                              PID:8656
                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                116⤵
                                                                                                                                                                                                                                                                                                                                                  PID:6964
                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                    C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                    117⤵
                                                                                                                                                                                                                                                                                                                                                      PID:8804
                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                        C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                        118⤵
                                                                                                                                                                                                                                                                                                                                                          PID:9048
                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                            C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                            119⤵
                                                                                                                                                                                                                                                                                                                                                              PID:2428
                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                120⤵
                                                                                                                                                                                                                                                                                                                                                                  PID:9196
                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                    C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                    121⤵
                                                                                                                                                                                                                                                                                                                                                                      PID:8432
                                                                                                                                                                                                                                                                                                                                                                      • C:\Windows\system32\cmd.exe
                                                                                                                                                                                                                                                                                                                                                                        C:\Windows\system32\cmd.exe /c "ver"
                                                                                                                                                                                                                                                                                                                                                                        122⤵
                                                                                                                                                                                                                                                                                                                                                                          PID:2864
                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                          C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                          122⤵
                                                                                                                                                                                                                                                                                                                                                                            PID:576
                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                              C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                              123⤵
                                                                                                                                                                                                                                                                                                                                                                                PID:9036
                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                  C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                  124⤵
                                                                                                                                                                                                                                                                                                                                                                                    PID:2268
                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                      C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                      125⤵
                                                                                                                                                                                                                                                                                                                                                                                        PID:5492
                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                          C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                          126⤵
                                                                                                                                                                                                                                                                                                                                                                                            PID:3756
                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                              C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                              127⤵
                                                                                                                                                                                                                                                                                                                                                                                                PID:6736
                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                  C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                  128⤵
                                                                                                                                                                                                                                                                                                                                                                                                    PID:264
                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                      C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                      129⤵
                                                                                                                                                                                                                                                                                                                                                                                                        PID:7396
                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Windows\system32\cmd.exe
                                                                                                                                                                                                                                                                                                                                                                                                          C:\Windows\system32\cmd.exe /c "ver"
                                                                                                                                                                                                                                                                                                                                                                                                          130⤵
                                                                                                                                                                                                                                                                                                                                                                                                            PID:1132
                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                            C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                            130⤵
                                                                                                                                                                                                                                                                                                                                                                                                              PID:1220
                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                131⤵
                                                                                                                                                                                                                                                                                                                                                                                                                  PID:9272
                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                    C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                    132⤵
                                                                                                                                                                                                                                                                                                                                                                                                                      PID:9348
                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                        C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                        133⤵
                                                                                                                                                                                                                                                                                                                                                                                                                          PID:9428
                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                            C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                            134⤵
                                                                                                                                                                                                                                                                                                                                                                                                                              PID:9508
                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                135⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:9584
                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                    C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                    136⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:9660
                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Windows\system32\cmd.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                        C:\Windows\system32\cmd.exe /c "ver"
                                                                                                                                                                                                                                                                                                                                                                                                                                        137⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:9724
                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                          C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                          137⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:9740
                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                              C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                              138⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:9820
                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                  C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                  139⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:9896
                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                      C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                      140⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:9972
                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                          C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                          141⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:10048
                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                              C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                              142⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:10124
                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                  C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                  143⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:10200
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                      C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                      144⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:9260
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                          C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                          145⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:9412
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                              C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                              146⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:3056
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  147⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:9596
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      148⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:8012
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          149⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:9720
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              150⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:5104
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  151⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:3188
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      152⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:4612
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          153⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:5184
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              154⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:3088
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  155⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:2596
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      156⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:2308
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          157⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:9520
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              158⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:4940
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  159⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:5916
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      160⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:4244
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          161⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:10108
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              162⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:10028
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Windows\system32\cmd.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  C:\Windows\system32\cmd.exe /c "ver"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  163⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:4988
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    163⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:2820
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        164⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:6832
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            165⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:10064
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                166⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:8384
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    167⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:6752
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        168⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:3004
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            169⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:8236
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                170⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:8808
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    171⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:10276
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        172⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:10352
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            173⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:10428
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                174⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:10504
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    175⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:10580
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        176⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:10660
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            177⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:10740
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Windows\system32\cmd.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                C:\Windows\system32\cmd.exe /c "ver"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                178⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:10808
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  178⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:10820
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      179⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:10896
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          180⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:10972
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              181⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:11048
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  182⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:11136
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      183⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:7080
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          184⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:9188
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              185⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:10544
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  186⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:2152
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      187⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:10776
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          188⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:10936
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              189⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:7316
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Windows\system32\cmd.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  C:\Windows\system32\cmd.exe /c "ver"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  190⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:11224
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    190⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:11256
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        191⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:1132
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            192⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:10652
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                193⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:10952
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    194⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:9600
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        195⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:3656
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            196⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:6056
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                197⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:8016
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    198⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      PID:11012
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        199⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          PID:7800
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            200⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              PID:7248
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • C:\Windows\system32\cmd.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                C:\Windows\system32\cmd.exe /c "ver"
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                201⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  PID:11316
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  201⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:11328
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      202⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:11404
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          203⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:11484
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              204⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:11564
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  205⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:11644
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      206⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:11724
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          207⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:11800
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              208⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:11876
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  209⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:11952
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      210⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:12028
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          211⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:12104
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              212⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:12180
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  213⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:12256
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      214⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:7624
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          215⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:11444
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              216⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:11636
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  217⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:9912
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      218⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:8248
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          219⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:8400
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              220⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:8556
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  221⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:12160
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      222⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:11464
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          223⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:8860
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              224⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:11936
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  225⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:12192
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      226⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:3228
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          227⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:3844
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              228⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:11864
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  229⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:2320
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      230⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:9068
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          231⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:704
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              232⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:2140
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  233⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:12300
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      234⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:12388
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          235⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:12484
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              236⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:12568
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  237⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:12664
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      238⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:12744
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          239⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:12836
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              240⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:12920
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  241⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:12996
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      242⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:13072
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          243⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:13148
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              244⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:13232
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  245⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:12296
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      246⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:8512
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          247⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:4168
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              248⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:2908
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  249⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:12656
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      250⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:12880
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          251⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:7684
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              252⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:13112
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  253⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:13140
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      254⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:436
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          255⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:5092
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              256⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:2516
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  257⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:4452
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      258⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:9852
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          259⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:12896
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              260⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:9384
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  261⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:10156
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      262⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        PID:6036
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          263⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            PID:12848
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              264⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                PID:5584
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  C:\Users\Admin\AppData\Local\Temp\2026-07-14_3faa3fe744ed1a679d9f05e8591fa46e_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom.exe -m pip install pycryptodome requests psutil
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  265⤵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    PID:6512

                                                                                                                                                                                                                                                                                                                                                                                                                                  Network

                                                                                                                                                                                                                                                                                                                                                                                                                                        MITRE ATT&CK Matrix

                                                                                                                                                                                                                                                                                                                                                                                                                                        Replay Monitor

                                                                                                                                                                                                                                                                                                                                                                                                                                        Loading Replay Monitor...

                                                                                                                                                                                                                                                                                                                                                                                                                                        Downloads

                                                                                                                                                                                                                                                                                                                                                                                                                                        _raw_aes.pyd
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\_MEI60242\Crypto\Cipher\_raw_aes.pyd
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 34KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 520b343e44b5633bbc4fdcecc705a7f2eb6e55d082a1f3e4723ada9d7e5ea97d
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                                                                        Submit Download

                                                                                                                                                                                                                                                                                                                                                                                                                                        _raw_aesni.pyd
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\_MEI60242\Crypto\Cipher\_raw_aesni.pyd
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 15KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 3818873f50418cbecde58150e9bffff7372d2c2067fc0b96ffac9482dfddd603
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                                                                        Submit Download

                                                                                                                                                                                                                                                                                                                                                                                                                                        _cpuid_c.pyd
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\_MEI60242\Crypto\Util\_cpuid_c.pyd
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 10KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 2af984819d9b1f95132520901b355eb85aa24d5efc6fc5ae9e77252ed03b7f4b
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                                                                        Submit Download

                                                                                                                                                                                                                                                                                                                                                                                                                                        VCRUNTIME140.dll
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\_MEI60242\VCRUNTIME140.dll
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 117KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 052ad6a20d375957e82aa6a3c441ea548d89be0981516ca7eb306e063d5027f4
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                                                                        Submit Download

                                                                                                                                                                                                                                                                                                                                                                                                                                        VCRUNTIME140_1.dll
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\_MEI60242\VCRUNTIME140_1.dll
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 48KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 6a99bc0128e0c7d6cbbf615fcc26909565e17d4ca3451b97f8987f9c6acbc6c8
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                                                                        Submit Download

                                                                                                                                                                                                                                                                                                                                                                                                                                        _bz2.pyd
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\_MEI60242\_bz2.pyd
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 85KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 d28c3dd1c22bfb8a6e8a6a9c2359842b797d08e878ecb7805f60e86a45589d11
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                                                                        Submit Download

                                                                                                                                                                                                                                                                                                                                                                                                                                        _ctypes.pyd
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\_MEI60242\_ctypes.pyd
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 139KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 25d9b0be550d428fecc697ca20450343a7c3ce77c9f5283e9aecfd188d609250
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                                                                        Submit Download

                                                                                                                                                                                                                                                                                                                                                                                                                                        _hashlib.pyd
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\_MEI60242\_hashlib.pyd
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 67KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 36ce760b9fac53fe51755f30a68d86f5fde89bf1b66c65c19e04aa3afa404ac2
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                                                                        Submit Download

                                                                                                                                                                                                                                                                                                                                                                                                                                        _lzma.pyd
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\_MEI60242\_lzma.pyd
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 157KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 5f7003f9f0256e36351ca2810b3485db28579b08e4d1d65f6f211fcd1136f395
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                                                                        Submit Download

                                                                                                                                                                                                                                                                                                                                                                                                                                        _queue.pyd
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\_MEI60242\_queue.pyd
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 35KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 bb53357b4e91ac23ed4061f15ff3e5e91a5b3be1cbb0c6cf294521ae5b4efa1c
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                                                                        Submit Download

                                                                                                                                                                                                                                                                                                                                                                                                                                        _socket.pyd
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\_MEI60242\_socket.pyd
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 85KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 25ac83cac32ed0d67b2cc9672ce64cb53f0a29a75b14c276e901023ff43da5f9
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                                                                        Submit Download

                                                                                                                                                                                                                                                                                                                                                                                                                                        _sqlite3.pyd
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\_MEI60242\_sqlite3.pyd
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 129KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 b0c4edff6d60f300373ec929ab915f95ee601bf167e04d28e4e9e28a8e536fe0
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                                                                        Submit Download

                                                                                                                                                                                                                                                                                                                                                                                                                                        _ssl.pyd
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\_MEI60242\_ssl.pyd
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 186KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 5c07572df2913618cfb851b608cb5f74d740fcce5c3f2e63dc0a2ba39ab35dad
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                                                                        Submit Download

                                                                                                                                                                                                                                                                                                                                                                                                                                        _wmi.pyd
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\_MEI60242\_wmi.pyd
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 39KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 0ab1fbcf18c95d70343012feb1aad61e1ba95aaed5b4a08e57fc5990e8a9a452
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                                                                        Submit Download

                                                                                                                                                                                                                                                                                                                                                                                                                                        _zstd.pyd
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\_MEI60242\_zstd.pyd
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 491KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 262aea62a994920daf152a10bdc0ca83a8b1c0874e71db23734862431de182c6
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                                                                        Submit Download

                                                                                                                                                                                                                                                                                                                                                                                                                                        ada92cb5d92a588d1b93__mypyc.cp314-win_amd64.pyd
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\_MEI60242\ada92cb5d92a588d1b93__mypyc.cp314-win_amd64.pyd
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 218KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 3048af5864e17f79410273b3074416d67473eae22b3d7d1b7b58f24a506f82ed
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                                                                        Submit Download

                                                                                                                                                                                                                                                                                                                                                                                                                                        base_library.zip
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\_MEI60242\base_library.zip
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 1.2MB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 8f746bc7e6cdc11103f64e4e2db3e0b6dcd2da2d5e7edc439548bb9681bd433b
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                                                                        Submit Download

                                                                                                                                                                                                                                                                                                                                                                                                                                        cd.cp314-win_amd64.pyd
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\_MEI60242\charset_normalizer\cd.cp314-win_amd64.pyd
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 10KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 032b490f6b42a0928b3cb6e17fd4caf8a6becaaf05739c4fe41267dcf890c278
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                                                                        Submit Download

                                                                                                                                                                                                                                                                                                                                                                                                                                        libcrypto-3.dll
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\_MEI60242\libcrypto-3.dll
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 6.0MB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 53c529145339fb042a3dcd3a09c2d7753204f8b4fc79d99e0d31e69a33985958
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                                                                        Submit Download

                                                                                                                                                                                                                                                                                                                                                                                                                                        libffi-8.dll
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\_MEI60242\libffi-8.dll
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 38KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                                                                        Submit Download

                                                                                                                                                                                                                                                                                                                                                                                                                                        libssl-3.dll
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\_MEI60242\libssl-3.dll
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 1.3MB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 b17a87979862d19241edc4318f967e24c3ec356ed6c2368f561179fab2311001
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                                                                        Submit Download

                                                                                                                                                                                                                                                                                                                                                                                                                                        _psutil_windows.pyd
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\_MEI60242\psutil\_psutil_windows.pyd
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 69KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 0035450801bd7d938e9e146c5ec28e619cb5a5f4a18cdc53ac7e9734c7f94f78
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                                                                        Submit Download

                                                                                                                                                                                                                                                                                                                                                                                                                                        python3.DLL
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\_MEI60242\python3.DLL
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 72KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 22c6e46d8bd563cdb072650901461ef68be2ea6cb1e80af859559d9395a27e39
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                                                                        Submit Download

                                                                                                                                                                                                                                                                                                                                                                                                                                        python314.dll
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\_MEI60242\python314.dll
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 6.5MB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 fde89cdb5c2d08ae65de7ef4abca1876c93ba3796002f5ac0bf7e4d4f5a94da0
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                                                                        Submit Download

                                                                                                                                                                                                                                                                                                                                                                                                                                        select.pyd
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\_MEI60242\select.pyd
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 32KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 fab1b4cee101359d82d72061b83cff1855337b3677b9fe01cd69f7548f4c496e
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                                                                        Submit Download

                                                                                                                                                                                                                                                                                                                                                                                                                                        Lorem ipsum.txt
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\_MEI60242\setuptools\_vendor\jaraco\text\Lorem ipsum.txt
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 37fedcffbf73c4eb9f058f47677cb33203a436ff9390e4d38a8e01c9dad28e0b
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                                                                                        Submit Download

                                                                                                                                                                                                                                                                                                                                                                                                                                        sqlite3.dll
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\_MEI60242\sqlite3.dll
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 1.5MB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 3557565665e608cd24726730e52690a131efcb0e2d5090337b2e05fb89d49c76
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                                                                        Submit Download

                                                                                                                                                                                                                                                                                                                                                                                                                                        unicodedata.pyd
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\_MEI60242\unicodedata.pyd
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Size 741KB
                                                                                                                                                                                                                                                                                                                                                                                                                                        • SHA256 0d4f124b2d6622d276d777f7106972219f9b310edb5df8149c253da7c013d6d8
                                                                                                                                                                                                                                                                                                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                                                                        Submit Download