Overview

overview

8

Static

static

3

7za.dll

windows10-2004-x64

3

7za.dll

windows11-ltsc_2024-x64

3

7za.exe

windows10-2004-x64

3

7za.exe

windows11-ltsc_2024-x64

3

7zxa.dll

windows10-2004-x64

3

7zxa.dll

windows11-ltsc_2024-x64

3

start.cmd

windows10-2004-x64

8

start.cmd

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    118s
  • max time network
    155s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    16/07/2026, 18:29

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    start.cmd
  • Size 86B
  • Sample260716-w487csft51
  • SHA256 030ee398e53caf0928e757162f3c7be7d593a59dde2795991ec7e4fd8e71f2e3
  • MD5 SHA1 SHA512 TLSH
Score
8/10
defense_evasiondiscoverypersistenceprivilege_escalationupx

Malware Config

Signatures

  • Badlisted process makes network request 64 IoCs

    Network request originating from process or tool commonly abused by malware.

  • Modifies Windows Firewall 2 TTPs 2 IoCs
    defense_evasion
  • Executes dropped EXE 46 IoCs
  • UPX packed file 62 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Event Triggered Execution: Netsh Helper DLL 1 TTPs 6 IoCs

    Netsh.exe (also referred to as Netshell) is a command-line scripting utility used to interact with the network configuration of a system.

    persistenceprivilege_escalation
  • System Location Discovery: System Language Discovery 1 TTPs 64 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 64 IoCs

    Adversaries may check for Internet connectivity on compromised systems.

    discovery
  • Modifies registry class 3 IoCs
  • Script User-Agent 1 IoCs

    Uses user-agent string associated with script host/environment.

  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\start.cmd"
    1⤵
    • Modifies registry class
    • Suspicious use of WriteProcessMemory
    PID:3512
    • C:\Users\Admin\AppData\Local\Temp\7za.exe
      7za.exe x -y -aoa -pbeetle arc.7z -oext
      2⤵
      • Suspicious use of AdjustPrivilegeToken
      PID:5180
    • C:\Windows\SysWOW64\mshta.exe
      "C:\Windows\SysWOW64\mshta.exe" "C:\Users\Admin\AppData\Local\Temp\ext\run.hta" {1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}{1E460BD7-F1C3-4B2E-88BF-4E770A288AF5} --sfx
      2⤵
      • Badlisted process makes network request
      • System Location Discovery: System Language Discovery
      • Modifies registry class
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:2296
      • C:\Windows\SysWOW64\rundll32.exe
        rundll32 kernel32,Sleep
        3⤵
        • System Location Discovery: System Language Discovery
        PID:3312
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c "netsh advfirewall firewall delete rule name="DriverPack aria2c.exe" || echo Done & call echo Done %^errorLevel% > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\run_command_69828.txt""
        3⤵
        • Suspicious use of WriteProcessMemory
        PID:3348
        • C:\Windows\SysWOW64\netsh.exe
          netsh advfirewall firewall delete rule name="DriverPack aria2c.exe"
          4⤵
          • Modifies Windows Firewall
          • Event Triggered Execution: Netsh Helper DLL
          • System Location Discovery: System Language Discovery
          PID:5856
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c "netsh advfirewall firewall add rule name="DriverPack aria2c.exe" dir=in action=allow program="C:\Users\Admin\AppData\Local\Temp\ext\tools\aria2c.exe" || echo Done & call echo Done %^errorLevel% > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\run_command_1217.txt""
        3⤵
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:4660
        • C:\Windows\SysWOW64\netsh.exe
          netsh advfirewall firewall add rule name="DriverPack aria2c.exe" dir=in action=allow program="C:\Users\Admin\AppData\Local\Temp\ext\tools\aria2c.exe"
          4⤵
          • Modifies Windows Firewall
          • Event Triggered Execution: Netsh Helper DLL
          • System Location Discovery: System Language Discovery
          PID:3524
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/intro.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_20482.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_20482.txt""
        3⤵
        • Suspicious use of WriteProcessMemory
        PID:4396
        • C:\Users\Admin\AppData\Local\Temp\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/intro.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_20482.log"
          4⤵
          • Executes dropped EXE
          PID:3904
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/START-INITIAL-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_25915.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_25915.txt""
        3⤵
        • System Location Discovery: System Language Discovery
        • System Network Configuration Discovery: Internet Connection Discovery
        • Suspicious use of WriteProcessMemory
        PID:4440
        • C:\Users\Admin\AppData\Local\Temp\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/START-INITIAL-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_25915.log"
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          • System Network Configuration Discovery: Internet Connection Discovery
          PID:1900
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/START-LOADED-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_23043.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_23043.txt""
        3⤵
        • System Location Discovery: System Language Discovery
        • System Network Configuration Discovery: Internet Connection Discovery
        • Suspicious use of WriteProcessMemory
        PID:4364
        • C:\Users\Admin\AppData\Local\Temp\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/START-LOADED-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_23043.log"
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          • System Network Configuration Discovery: Internet Connection Discovery
          PID:3576
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/START-SETUP-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_58738.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_58738.txt""
        3⤵
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:4488
        • C:\Users\Admin\AppData\Local\Temp\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/START-SETUP-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_58738.log"
          4⤵
          • Executes dropped EXE
          • System Network Configuration Discovery: Internet Connection Discovery
          PID:3816
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/EXPERT-DRIVERS-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_55837.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_55837.txt""
        3⤵
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:2612
        • C:\Users\Admin\AppData\Local\Temp\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/EXPERT-DRIVERS-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_55837.log"
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          • System Network Configuration Discovery: Internet Connection Discovery
          PID:4852
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/EXPERT-DRIVERS-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_84937.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_84937.txt""
        3⤵
        • System Location Discovery: System Language Discovery
        • System Network Configuration Discovery: Internet Connection Discovery
        • Suspicious use of WriteProcessMemory
        PID:4612
        • C:\Users\Admin\AppData\Local\Temp\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/EXPERT-DRIVERS-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_84937.log"
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          PID:5680
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/EXPERT-DRIVERS-3.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_45332.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_45332.txt""
        3⤵
        • System Location Discovery: System Language Discovery
        • System Network Configuration Discovery: Internet Connection Discovery
        • Suspicious use of WriteProcessMemory
        PID:4352
        • C:\Users\Admin\AppData\Local\Temp\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/EXPERT-DRIVERS-3.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_45332.log"
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          PID:4328
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/TEAM-PROOF-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_54054.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_54054.txt""
        3⤵
        • Suspicious use of WriteProcessMemory
        PID:5148
        • C:\Users\Admin\AppData\Local\Temp\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/TEAM-PROOF-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_54054.log"
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          PID:1144
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/TEAM-PROOF-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_23465.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_23465.txt""
        3⤵
        • System Location Discovery: System Language Discovery
        • System Network Configuration Discovery: Internet Connection Discovery
        • Suspicious use of WriteProcessMemory
        PID:5964
        • C:\Users\Admin\AppData\Local\Temp\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/TEAM-PROOF-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_23465.log"
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          • System Network Configuration Discovery: Internet Connection Discovery
          PID:5632
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/TEAM-PROOF-3.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_38932.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_38932.txt""
        3⤵
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:5348
        • C:\Users\Admin\AppData\Local\Temp\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/TEAM-PROOF-3.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_38932.log"
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          • System Network Configuration Discovery: Internet Connection Discovery
          PID:5176
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/CONTINUOUS-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_9472.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_9472.txt""
        3⤵
        • System Location Discovery: System Language Discovery
        • System Network Configuration Discovery: Internet Connection Discovery
        • Suspicious use of WriteProcessMemory
        PID:3784
        • C:\Users\Admin\AppData\Local\Temp\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/CONTINUOUS-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_9472.log"
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          • System Network Configuration Discovery: Internet Connection Discovery
          PID:4532
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/CONTINUOUS-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_64456.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_64456.txt""
        3⤵
        • System Location Discovery: System Language Discovery
        • System Network Configuration Discovery: Internet Connection Discovery
        • Suspicious use of WriteProcessMemory
        PID:2136
        • C:\Users\Admin\AppData\Local\Temp\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/CONTINUOUS-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_64456.log"
          4⤵
          • Executes dropped EXE
          PID:6028
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/ANTIVIRUS-3.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_77142.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_77142.txt""
        3⤵
        • System Location Discovery: System Language Discovery
        • System Network Configuration Discovery: Internet Connection Discovery
        • Suspicious use of WriteProcessMemory
        PID:796
        • C:\Users\Admin\AppData\Local\Temp\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/ANTIVIRUS-3.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_77142.log"
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          • System Network Configuration Discovery: Internet Connection Discovery
          PID:6140
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/ANTIVIRUS-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_26453.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_26453.txt""
        3⤵
        • Suspicious use of WriteProcessMemory
        PID:4368
        • C:\Users\Admin\AppData\Local\Temp\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/ANTIVIRUS-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_26453.log"
          4⤵
          • Executes dropped EXE
          • System Network Configuration Discovery: Internet Connection Discovery
          PID:6044
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/ANTIVIRUS-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_63766.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_63766.txt""
        3⤵
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:124
        • C:\Users\Admin\AppData\Local\Temp\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/ANTIVIRUS-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_63766.log"
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          • System Network Configuration Discovery: Internet Connection Discovery
          PID:2804
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/CONTINUOUS-3.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_54032.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_54032.txt""
        3⤵
        • System Location Discovery: System Language Discovery
        • System Network Configuration Discovery: Internet Connection Discovery
        • Suspicious use of WriteProcessMemory
        PID:2620
        • C:\Users\Admin\AppData\Local\Temp\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/CONTINUOUS-3.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_54032.log"
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          PID:5896
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/EXPERT-DRIVERS-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_72329.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_72329.txt""
        3⤵
        • System Location Discovery: System Language Discovery
        • System Network Configuration Discovery: Internet Connection Discovery
        • Suspicious use of WriteProcessMemory
        PID:4468
        • C:\Users\Admin\AppData\Local\Temp\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/EXPERT-DRIVERS-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_72329.log"
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          • System Network Configuration Discovery: Internet Connection Discovery
          PID:4732
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/EXPERT-DRIVERS-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_23772.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_23772.txt""
        3⤵
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:2864
        • C:\Users\Admin\AppData\Local\Temp\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/EXPERT-DRIVERS-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_23772.log"
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          • System Network Configuration Discovery: Internet Connection Discovery
          PID:2336
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/EXPERT-DRIVERS-3.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_588.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_588.txt""
        3⤵
        • Suspicious use of WriteProcessMemory
        PID:1680
        • C:\Users\Admin\AppData\Local\Temp\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/EXPERT-DRIVERS-3.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_588.log"
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          PID:2368
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/EXPERT-PROGRAMS_CHECKBOX_USED-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_29237.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_29237.txt""
        3⤵
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:3332
        • C:\Users\Admin\AppData\Local\Temp\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/EXPERT-PROGRAMS_CHECKBOX_USED-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_29237.log"
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          • System Network Configuration Discovery: Internet Connection Discovery
          PID:4892
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/EXPERT-PROGRAMS_CHECKBOX_USED-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_88650.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_88650.txt""
        3⤵
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:472
        • C:\Users\Admin\AppData\Local\Temp\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/EXPERT-PROGRAMS_CHECKBOX_USED-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_88650.log"
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          PID:952
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/EXPERT-PROTECT-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_19791.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_19791.txt""
        3⤵
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:4100
        • C:\Users\Admin\AppData\Local\Temp\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/EXPERT-PROTECT-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_19791.log"
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          • System Network Configuration Discovery: Internet Connection Discovery
          PID:5800
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/EXPERT-PROTECT-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_79380.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_79380.txt""
        3⤵
        • Suspicious use of WriteProcessMemory
        PID:2092
        • C:\Users\Admin\AppData\Local\Temp\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/EXPERT-PROTECT-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_79380.log"
          4⤵
          • Executes dropped EXE
          • System Network Configuration Discovery: Internet Connection Discovery
          PID:1912
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/EXPERT-PROTECT-3.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_45741.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_45741.txt""
        3⤵
        • System Network Configuration Discovery: Internet Connection Discovery
        • Suspicious use of WriteProcessMemory
        PID:2764
        • C:\Users\Admin\AppData\Local\Temp\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/EXPERT-PROTECT-3.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_45741.log"
          4⤵
          • Executes dropped EXE
          PID:4436
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/EXPERT-DIAGNOSTICS-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_47580.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_47580.txt""
        3⤵
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:1068
        • C:\Users\Admin\AppData\Local\Temp\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/EXPERT-DIAGNOSTICS-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_47580.log"
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          • System Network Configuration Discovery: Internet Connection Discovery
          PID:4548
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/EXPERT-DIAGNOSTICS-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_19292.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_19292.txt""
        3⤵
        • System Location Discovery: System Language Discovery
        • System Network Configuration Discovery: Internet Connection Discovery
        • Suspicious use of WriteProcessMemory
        PID:4464
        • C:\Users\Admin\AppData\Local\Temp\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/EXPERT-DIAGNOSTICS-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_19292.log"
          4⤵
          • Executes dropped EXE
          PID:4544
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/EXPERT-DIAGNOSTICS-3.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_90077.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_90077.txt""
        3⤵
        • System Network Configuration Discovery: Internet Connection Discovery
        PID:6088
        • C:\Users\Admin\AppData\Local\Temp\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/EXPERT-DIAGNOSTICS-3.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_90077.log"
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          PID:1868
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/EXPERT-DIAGNOSTICS-4.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_23469.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_23469.txt""
        3⤵
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:4152
        • C:\Users\Admin\AppData\Local\Temp\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/EXPERT-DIAGNOSTICS-4.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_23469.log"
          4⤵
          • Executes dropped EXE
          PID:244
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/EXPERT-DIAGNOSTICS-5.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_21996.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_21996.txt""
        3⤵
        • System Network Configuration Discovery: Internet Connection Discovery
        • Suspicious use of WriteProcessMemory
        PID:5932
        • C:\Users\Admin\AppData\Local\Temp\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/EXPERT-DIAGNOSTICS-5.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_21996.log"
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          PID:568
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/EXPERT-DIAGNOSTICS-6.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_64024.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_64024.txt""
        3⤵
        • System Location Discovery: System Language Discovery
        PID:1100
        • C:\Users\Admin\AppData\Local\Temp\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/EXPERT-DIAGNOSTICS-6.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_64024.log"
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          PID:1840
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/EXPERT-CONFIGURATOR-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_88362.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_88362.txt""
        3⤵
        • System Location Discovery: System Language Discovery
        PID:5096
        • C:\Users\Admin\AppData\Local\Temp\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/EXPERT-CONFIGURATOR-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_88362.log"
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          • System Network Configuration Discovery: Internet Connection Discovery
          PID:3160
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/EXPERT-CONFIGURATOR-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_66452.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_66452.txt""
        3⤵
        • System Network Configuration Discovery: Internet Connection Discovery
        PID:5404
        • C:\Users\Admin\AppData\Local\Temp\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/EXPERT-CONFIGURATOR-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_66452.log"
          4⤵
          • Executes dropped EXE
          PID:1044
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/EXPERT-CONFIGURATOR-3.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_45183.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_45183.txt""
        3⤵
        • System Location Discovery: System Language Discovery
        • System Network Configuration Discovery: Internet Connection Discovery
        PID:2004
        • C:\Users\Admin\AppData\Local\Temp\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/EXPERT-CONFIGURATOR-3.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_45183.log"
          4⤵
          • Executes dropped EXE
          • System Network Configuration Discovery: Internet Connection Discovery
          PID:1724
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/EXPERT-SETTINGS-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_14528.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_14528.txt""
        3⤵
        • System Network Configuration Discovery: Internet Connection Discovery
        PID:5960
        • C:\Users\Admin\AppData\Local\Temp\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/EXPERT-SETTINGS-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_14528.log"
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          • System Network Configuration Discovery: Internet Connection Discovery
          PID:4976
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/TEAM-PROOF-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_62343.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_62343.txt""
        3⤵
        • System Location Discovery: System Language Discovery
        • System Network Configuration Discovery: Internet Connection Discovery
        PID:5332
        • C:\Users\Admin\AppData\Local\Temp\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/TEAM-PROOF-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_62343.log"
          4⤵
          • Executes dropped EXE
          • System Network Configuration Discovery: Internet Connection Discovery
          PID:2436
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/TEAM-PROOF-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_15552.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_15552.txt""
        3⤵
        • System Location Discovery: System Language Discovery
        • System Network Configuration Discovery: Internet Connection Discovery
        PID:5368
        • C:\Users\Admin\AppData\Local\Temp\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/TEAM-PROOF-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_15552.log"
          4⤵
          • Executes dropped EXE
          PID:5680
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/TEAM-PROOF-3.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_50443.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_50443.txt""
        3⤵
        • System Network Configuration Discovery: Internet Connection Discovery
        PID:4516
        • C:\Users\Admin\AppData\Local\Temp\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/TEAM-PROOF-3.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_50443.log"
          4⤵
          • Executes dropped EXE
          PID:2144
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/CONTINUOUS-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_56742.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_56742.txt""
        3⤵
        • System Location Discovery: System Language Discovery
        • System Network Configuration Discovery: Internet Connection Discovery
        PID:5184
        • C:\Users\Admin\AppData\Local\Temp\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/CONTINUOUS-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_56742.log"
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          PID:1488
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/CONTINUOUS-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_65335.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_65335.txt""
        3⤵
        • System Network Configuration Discovery: Internet Connection Discovery
        PID:4200
        • C:\Users\Admin\AppData\Local\Temp\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/CONTINUOUS-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_65335.log"
          4⤵
          • Executes dropped EXE
          • System Network Configuration Discovery: Internet Connection Discovery
          PID:256
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/CONTINUOUS-3.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_97406.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_97406.txt""
        3⤵
        • System Network Configuration Discovery: Internet Connection Discovery
        PID:3220
        • C:\Users\Admin\AppData\Local\Temp\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/CONTINUOUS-3.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_97406.log"
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          • System Network Configuration Discovery: Internet Connection Discovery
          PID:5628
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/ANTIVIRUS-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_24072.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_24072.txt""
        3⤵
        • System Location Discovery: System Language Discovery
        • System Network Configuration Discovery: Internet Connection Discovery
        PID:4880
        • C:\Users\Admin\AppData\Local\Temp\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/ANTIVIRUS-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_24072.log"
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          • System Network Configuration Discovery: Internet Connection Discovery
          PID:4596
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/ANTIVIRUS-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_71785.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_71785.txt""
        3⤵
        • System Location Discovery: System Language Discovery
        • System Network Configuration Discovery: Internet Connection Discovery
        PID:4360
        • C:\Users\Admin\AppData\Local\Temp\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/ANTIVIRUS-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_71785.log"
          4⤵
          • Executes dropped EXE
          • System Network Configuration Discovery: Internet Connection Discovery
          PID:3396
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/ANTIVIRUS-3.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_2688.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_2688.txt""
        3⤵
        • System Location Discovery: System Language Discovery
        • System Network Configuration Discovery: Internet Connection Discovery
        PID:3568
        • C:\Users\Admin\AppData\Local\Temp\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/ANTIVIRUS-3.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_2688.log"
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          • System Network Configuration Discovery: Internet Connection Discovery
          PID:1856
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/COMPILATION-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_71299.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_71299.txt""
        3⤵
        • System Network Configuration Discovery: Internet Connection Discovery
        PID:3760
        • C:\Users\Admin\AppData\Local\Temp\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/COMPILATION-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_71299.log"
          4⤵
          • Executes dropped EXE
          PID:2772
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/COMPILATION-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_34303.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_34303.txt""
        3⤵
        • System Network Configuration Discovery: Internet Connection Discovery
        PID:824
        • C:\Users\Admin\AppData\Local\Temp\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/COMPILATION-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_34303.log"
          4⤵
          • Executes dropped EXE
          PID:5436
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/COMPILATION-3.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_34735.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_34735.txt""
        3⤵
        • System Location Discovery: System Language Discovery
        • System Network Configuration Discovery: Internet Connection Discovery
        PID:2872
        • C:\Users\Admin\AppData\Local\Temp\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/COMPILATION-3.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_34735.log"
          4⤵
          • Executes dropped EXE
          • System Network Configuration Discovery: Internet Connection Discovery
          PID:1840
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/SERVICE_MODE-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_74852.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_74852.txt""
        3⤵
        • System Network Configuration Discovery: Internet Connection Discovery
        PID:2268
        • C:\Users\Admin\AppData\Local\Temp\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/SERVICE_MODE-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_74852.log"
          4⤵
          • System Network Configuration Discovery: Internet Connection Discovery
          PID:1476
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/SERVICE_MODE-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_67025.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_67025.txt""
        3⤵
        • System Network Configuration Discovery: Internet Connection Discovery
        PID:1148
        • C:\Users\Admin\AppData\Local\Temp\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/SERVICE_MODE-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_67025.log"
          4⤵
            PID:5228
        • C:\Windows\SysWOW64\cmd.exe
          "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/ISTART_1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_16341.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_16341.txt""
          3⤵
          • System Network Configuration Discovery: Internet Connection Discovery
          PID:4888
          • C:\Users\Admin\AppData\Local\Temp\ext\tools\driverpack-wget.exe
            "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/ISTART_1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_16341.log"
            4⤵
            • System Network Configuration Discovery: Internet Connection Discovery
            PID:4680
        • C:\Windows\SysWOW64\cmd.exe
          "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/ISTART_2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_71069.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_71069.txt""
          3⤵
          • System Network Configuration Discovery: Internet Connection Discovery
          PID:2484
          • C:\Users\Admin\AppData\Local\Temp\ext\tools\driverpack-wget.exe
            "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/ISTART_2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_71069.log"
            4⤵
              PID:616
          • C:\Windows\SysWOW64\cmd.exe
            "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/ISTART_3.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_70171.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_70171.txt""
            3⤵
            • System Network Configuration Discovery: Internet Connection Discovery
            PID:5268
            • C:\Users\Admin\AppData\Local\Temp\ext\tools\driverpack-wget.exe
              "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/ISTART_3.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_70171.log"
              4⤵
              • System Network Configuration Discovery: Internet Connection Discovery
              PID:4832
          • C:\Windows\SysWOW64\cmd.exe
            "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/ISTART_4.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_84807.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_84807.txt""
            3⤵
            • System Network Configuration Discovery: Internet Connection Discovery
            PID:2488
            • C:\Users\Admin\AppData\Local\Temp\ext\tools\driverpack-wget.exe
              "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/ISTART_4.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_84807.log"
              4⤵
                PID:6136
            • C:\Users\Admin\AppData\Local\Temp\ext\Tools\driverpack-7za.exe
              "C:\Users\Admin\AppData\Local\Temp\ext\Tools\driverpack-7za.exe" a "C:\Users\Admin\AppData\Roaming\DRPSu\snapshots\DriverPack_Snapshot_20260716_193211.zip" "C:\Users\Admin\AppData\Roaming\DRPSu\diagnostics\*"
              3⤵
                PID:2584

          Network

                MITRE ATT&CK Enterprise v16

                Replay Monitor

                Loading Replay Monitor...

                Downloads

                ANTIVIRUS-3[1].mp3
                • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\BWL9CVZL\ANTIVIRUS-3[1].mp3
                • Size 21KB
                • SHA256 1d23cba7b365efc03cf981a61ad2faf55a93740e077e1ab6569a2ec2c58191fd
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                intro[1].mp3
                • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\BWL9CVZL\intro[1].mp3
                • Size 27KB
                • SHA256 8fcbf2cede0ba798aabc145593b273d3c76596ca9bce0a3138684fa7b416359f
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                CONTINUOUS-3[1].mp3
                • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\CFYAF9LW\CONTINUOUS-3[1].mp3
                • Size 26KB
                • SHA256 88d420fb6a0a847c522066698efec070203c436aa5e2ff2097bb2e5e3692150b
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                ANTIVIRUS-2[1].mp3
                • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\UQC8YCF3\ANTIVIRUS-2[1].mp3
                • Size 23KB
                • SHA256 c87feb5bd45ff4ffb897f53c22e3e2f5732ad49d124724248a06627162bc40ab
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                CONTINUOUS-2[1].mp3
                • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\UQC8YCF3\CONTINUOUS-2[1].mp3
                • Size 26KB
                • SHA256 a3857040e7a5e315d3fbab41ddb232465fc2b57db4aaedef2f3b74c699f01a8a
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                collect[2].gif
                • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\UQC8YCF3\collect[2].gif
                • Size 35B
                • SHA256 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                • MD5 SHA1 SHA512
                Submit Download

                sync_cookie_image_finish[1].gif
                • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\UQC8YCF3\sync_cookie_image_finish[1].gif
                • Size 43B
                • SHA256 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
                • MD5 SHA1 SHA512
                Submit Download

                DriverPackSolution.html
                • Path C:\Users\Admin\AppData\Local\Temp\ext\DriverPackSolution.html
                • Size 4KB
                • SHA256 8892e63141854bcf4bb1452abef68dd2c348c59322d697ef11a7ab7c5e3c4aea
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                ANTIVIRUS-1.mp3
                • Path C:\Users\Admin\AppData\Local\Temp\ext\audio\en\ANTIVIRUS-1.mp3
                • Size 36KB
                • SHA256 46d1565a9237f7ade1d03a2d70c084f5f688d6a0574220ecc5eb83d5cfd875ed
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                COMPILATION-1.mp3
                • Path C:\Users\Admin\AppData\Local\Temp\ext\audio\en\COMPILATION-1.mp3
                • Size 17KB
                • SHA256 ae70f1cc64550e94420d87adcaad724d1249982742c3bde5febad04eff28f988
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                COMPILATION-2.mp3
                • Path C:\Users\Admin\AppData\Local\Temp\ext\audio\en\COMPILATION-2.mp3
                • Size 22KB
                • SHA256 d25c6a14bf6694641f0237ddeb0aef74112e1cae7acf77f753cbe20bb8bbd203
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                COMPILATION-3.mp3
                • Path C:\Users\Admin\AppData\Local\Temp\ext\audio\en\COMPILATION-3.mp3
                • Size 17KB
                • SHA256 0069a0aa7fe69bebf3154744535e3b52ced7362e07e0e832698629f68c02785d
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                CONTINUOUS-1.mp3
                • Path C:\Users\Admin\AppData\Local\Temp\ext\audio\en\CONTINUOUS-1.mp3
                • Size 9KB
                • SHA256 571aed8d5306ecfa709dc894f6fe66176bc99380ee42694328b3da237fd6b989
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                EXPERT-CONFIGURATOR-1.mp3
                • Path C:\Users\Admin\AppData\Local\Temp\ext\audio\en\EXPERT-CONFIGURATOR-1.mp3
                • Size 23KB
                • SHA256 3aa947528d8e22c95fc3c2c189a223293746f65aa04a034ab7e51f07108b0e63
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                EXPERT-CONFIGURATOR-2.mp3
                • Path C:\Users\Admin\AppData\Local\Temp\ext\audio\en\EXPERT-CONFIGURATOR-2.mp3
                • Size 30KB
                • SHA256 5a3e6a91181f9c87c354447d4e8c06a49cebfd06b2bb76683f44bb6a3200ee86
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                EXPERT-CONFIGURATOR-3.mp3
                • Path C:\Users\Admin\AppData\Local\Temp\ext\audio\en\EXPERT-CONFIGURATOR-3.mp3
                • Size 21KB
                • SHA256 78ae68bedd64b4cae4dadcf69c184b62c709756f9e2128bb178311431b4129ee
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                EXPERT-DIAGNOSTICS-2.mp3
                • Path C:\Users\Admin\AppData\Local\Temp\ext\audio\en\EXPERT-DIAGNOSTICS-2.mp3
                • Size 46KB
                • SHA256 37570e3dd380a1c779db17d7b4ee8b0ca4a25a2302f7112f087c7ab7dc7da517
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                EXPERT-DIAGNOSTICS-6.mp3
                • Path C:\Users\Admin\AppData\Local\Temp\ext\audio\en\EXPERT-DIAGNOSTICS-6.mp3
                • Size 13KB
                • SHA256 0116eef284c5228183cfd27992eda255775e5ea88b4e7739f2779967bd1b6fb8
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                EXPERT-DRIVERS-1.mp3
                • Path C:\Users\Admin\AppData\Local\Temp\ext\audio\en\EXPERT-DRIVERS-1.mp3
                • Size 25KB
                • SHA256 1f19a45b24a98014ab4821a1c80b1d2120f54e24cf2517b73f015141d6aa98ed
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                EXPERT-DRIVERS-2.mp3
                • Path C:\Users\Admin\AppData\Local\Temp\ext\audio\en\EXPERT-DRIVERS-2.mp3
                • Size 25KB
                • SHA256 9f35f0dbff0fbd1362b8f221550bf9d63e5d30ee8487bb47c78edb1661a52b9b
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                EXPERT-DRIVERS-3.mp3
                • Path C:\Users\Admin\AppData\Local\Temp\ext\audio\en\EXPERT-DRIVERS-3.mp3
                • Size 36KB
                • SHA256 540abfdf5e2894d09dded9dfffe2d1be207b484f32f8e0aa237aba52142eeb8a
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                EXPERT-PROTECT-1.mp3
                • Path C:\Users\Admin\AppData\Local\Temp\ext\audio\en\EXPERT-PROTECT-1.mp3
                • Size 37KB
                • SHA256 9545c34922b77b59a2fb172bad55f064e14761cf213b89061164cdcbdf8963a7
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                EXPERT-PROTECT-2.mp3
                • Path C:\Users\Admin\AppData\Local\Temp\ext\audio\en\EXPERT-PROTECT-2.mp3
                • Size 44KB
                • SHA256 82d48381d03dba7f4a566420a4921553c6aa15bc6a22bc6e08bb6e8466af8274
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                EXPERT-PROTECT-3.mp3
                • Path C:\Users\Admin\AppData\Local\Temp\ext\audio\en\EXPERT-PROTECT-3.mp3
                • Size 27KB
                • SHA256 996744756df49ce498243a7fcd70cf5cc9c55f399b8027ed712485c6843d1ced
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                EXPERT-SETTINGS-1.mp3
                • Path C:\Users\Admin\AppData\Local\Temp\ext\audio\en\EXPERT-SETTINGS-1.mp3
                • Size 27KB
                • SHA256 c924ba594bd39760e0939729a27a0bc201f61f8f2edc5123e4841f13cb7c5ccd
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                ISTART_2.mp3
                • Path C:\Users\Admin\AppData\Local\Temp\ext\audio\en\ISTART_2.mp3
                • Size 42KB
                • SHA256 df1126cb3c694ba6e5fde3e2149cfa536e02072bcc52dce9cf481fe9f9575401
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                SERVICE_MODE-1.mp3
                • Path C:\Users\Admin\AppData\Local\Temp\ext\audio\en\SERVICE_MODE-1.mp3
                • Size 43KB
                • SHA256 74ef8c36b37524515e37100952f7a36faa0f3163d6d5388f360dce946ad4fa28
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                SERVICE_MODE-2.mp3
                • Path C:\Users\Admin\AppData\Local\Temp\ext\audio\en\SERVICE_MODE-2.mp3
                • Size 36KB
                • SHA256 527f93a6a3159de9a01242e8a1f85c568651bd711da175e5a6c9fe1942224b97
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                START-INITIAL-1.mp3
                • Path C:\Users\Admin\AppData\Local\Temp\ext\audio\en\START-INITIAL-1.mp3
                • Size 20KB
                • SHA256 7ce172ba3df0c381dabc6688dc584035860052b57242ec01ee3adc60ccb3bbc3
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                START-LOADED-1.mp3
                • Path C:\Users\Admin\AppData\Local\Temp\ext\audio\en\START-LOADED-1.mp3
                • Size 38KB
                • SHA256 3a2f113b271e4a4a6bc8be28f4396babf7e92331492074c29dbaa83d0c09ad57
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                START-SETUP-1.mp3
                • Path C:\Users\Admin\AppData\Local\Temp\ext\audio\en\START-SETUP-1.mp3
                • Size 24KB
                • SHA256 f01ce28bdb7af9b93ed9e255d5f2c4b7860c97d2f0d58339dbd489828b3484ba
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                TEAM-PROOF-1.mp3
                • Path C:\Users\Admin\AppData\Local\Temp\ext\audio\en\TEAM-PROOF-1.mp3
                • Size 40KB
                • SHA256 07eca9f5ef7741062a9081a42dc70200ab38b0a48f31ac62393332ac24e97089
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                TEAM-PROOF-2.mp3
                • Path C:\Users\Admin\AppData\Local\Temp\ext\audio\en\TEAM-PROOF-2.mp3
                • Size 60KB
                • SHA256 09bd89dd7b59b6403c9fc495d8e4780840f9ade3ae9744f684e90876b250f981
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                TEAM-PROOF-3.mp3
                • Path C:\Users\Admin\AppData\Local\Temp\ext\audio\en\TEAM-PROOF-3.mp3
                • Size 17KB
                • SHA256 91c9b43045e05c5ea9debee09aec46356c9a286369569508181117ac98f6c487
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                STORIES-adout-8.mp3
                • Path C:\Users\Admin\AppData\Local\Temp\ext\audio\ru\STORIES-adout-8.mp3
                • Size 17KB
                • SHA256 c2f79a0267df7d522b13e49b406f74892cc6744b88204449387a335cf525550d
                • MD5 SHA1 SHA512 SSDEEP
                Submit Download

                config.js
                • Path C:\Users\Admin\AppData\Local\Temp\ext\config.js
                • Size 3KB
                • SHA256 18f86ef3fad86c97d56274e5577b178a77f40587a80451a971013248e37190a6
                • MD5 SHA1 SHA512 TLSH
                Submit Download

                custom-control.css
                • Path C:\Users\Admin\AppData\Local\Temp\ext\css\custom-control.css
                • Size 10KB
                • SHA256 7d7853e95258a7a3f8eaf41795f7124e7d2dacdeb5f1efe212b3ff7ed0da9e50
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                DRPicons-webfont.eot
                • Path C:\Users\Admin\AppData\Local\Temp\ext\css\fonts\DRPicons\DRPicons-webfont.eot
                • Size 7KB
                • SHA256 0a04d85875091cc334f63b90c8ccfa0838f20023945d949296363369066870e3
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                opensans-regular-webfont.eot
                • Path C:\Users\Admin\AppData\Local\Temp\ext\css\fonts\Open-Sans\opensans-regular-webfont.eot
                • Size 40KB
                • SHA256 3ae576bfa96d7cf6614c8c97290c7abe03191a8ceb0c837a21e7ffe70d66ca62
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                ProximaNova-Bold.eot
                • Path C:\Users\Admin\AppData\Local\Temp\ext\css\fonts\ProximaNova\ProximaNova-Bold.eot
                • Size 141KB
                • SHA256 1c3a470bf710204b1dbd65679b914af4b94e7f018b1f7df3d61ff863d6f335d9
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                ProximaNova-Bold.woff
                • Path C:\Users\Admin\AppData\Local\Temp\ext\css\fonts\ProximaNova\ProximaNova-Bold.woff
                • Size 57KB
                • SHA256 2a8f208d9d8556ff58da8a420316de6d634a568a0eeb94c043430659fff7d338
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                proxima_nova_light-webfont.eot
                • Path C:\Users\Admin\AppData\Local\Temp\ext\css\fonts\ProximaNova\proxima_nova_light-webfont.eot
                • Size 61KB
                • SHA256 53f30a622db68cebe92dbd384cc292aef13ad7e3349a10a77c29326e10634c21
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                proxima_nova_semibold-webfont.eot
                • Path C:\Users\Admin\AppData\Local\Temp\ext\css\fonts\ProximaNova\proxima_nova_semibold-webfont.eot
                • Size 65KB
                • SHA256 790579e11608136663d073bc6f99848c04b4dcd69216df7daf5be00df573a3fd
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                icons-checkbox.css
                • Path C:\Users\Admin\AppData\Local\Temp\ext\css\icons-checkbox.css
                • Size 444B
                • SHA256 cb134dcb95a407795c671a512c389894d3525fba3f6a2168fc5b9b7e875e78dc
                • MD5 SHA1 SHA512 TLSH
                Submit Download

                icons.css
                • Path C:\Users\Admin\AppData\Local\Temp\ext\css\icons.css
                • Size 509B
                • SHA256 b5f111103f7f090c246a223b1ff497b94c4dd3ac64bf5b3fb2d91555fcfd6f2c
                • MD5 SHA1 SHA512 TLSH
                Submit Download

                normalize.min.css
                • Path C:\Users\Admin\AppData\Local\Temp\ext\css\normalize.min.css
                • Size 1KB
                • SHA256 86235e2c477078adfe1188d07ca1e5d8198443aaf2436de1785a169f3e1d5463
                • MD5 SHA1 SHA512 TLSH
                Submit Download

                open-sans.css
                • Path C:\Users\Admin\AppData\Local\Temp\ext\css\open-sans.css
                • Size 1KB
                • SHA256 b9bd51ae6ccc7df20417e0ef341295b86bf8f74f6e235ee99ddefd675806f47f
                • MD5 SHA1 SHA512 TLSH
                Submit Download

                proximanova.css
                • Path C:\Users\Admin\AppData\Local\Temp\ext\css\proximanova.css
                • Size 2KB
                • SHA256 931071422410d73d9d7d3583745e476eac23c0cac5fbe344f8436499ee40ac46
                • MD5 SHA1 SHA512 TLSH
                Submit Download

                roboto.css
                • Path C:\Users\Admin\AppData\Local\Temp\ext\css\roboto.css
                • Size 1001B
                • SHA256 2537efe2fb974f58cddbc99abfcd7aed6e9df81992eed3e528b5f1748167b8fa
                • MD5 SHA1 SHA512 TLSH
                Submit Download

                style.css
                • Path C:\Users\Admin\AppData\Local\Temp\ext\css\style.css
                • Size 14KB
                • SHA256 3f8ec31a3c08de6c1aac117347b1b83f391bb0a91c9dbdc57ba9d11d5ba372d5
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                drp.css
                • Path C:\Users\Admin\AppData\Local\Temp\ext\drp.css
                • Size 190KB
                • SHA256 439bfd8bf9f9176c1757ba277850525f0abec59bb3ef7cd8a974a5ad1d2b3004
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                drp.js
                • Path C:\Users\Admin\AppData\Local\Temp\ext\drp.js
                • Size 3.7MB
                • SHA256 c0ae6134f693b80d71ece89965cde42c819e815c7218d54fcfad0372a62dec21
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                5.png
                • Path C:\Users\Admin\AppData\Local\Temp\ext\img\assistant-faces\start-screen\5.png
                • Size 75KB
                • SHA256 ad615ef1f7016826d475fe90b4363cc149b060de2b9406b4c58cb4a4f1938bef
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                wifi.png
                • Path C:\Users\Admin\AppData\Local\Temp\ext\img\device-class\new-ui\wifi.png
                • Size 1KB
                • SHA256 4da7ccf08d94f78c5e45554f8998c0e5f6d0a07b8a3a9e4b109543db6bc9ba43
                • MD5 SHA1 SHA512 TLSH
                Submit Download

                new-header-logo.png
                • Path C:\Users\Admin\AppData\Local\Temp\ext\img\header\new-header-logo.png
                • Size 4KB
                • SHA256 98856383428042c14739159f4a62168e9394f774bf2b696d62f46d70fc2ba175
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                banner_catalog-bg-ru.jpg
                • Path C:\Users\Admin\AppData\Local\Temp\ext\img\installation\banner_catalog-bg-ru.jpg
                • Size 74KB
                • SHA256 1fbb1510ae2f6db083cddf7c0f16364d5f5d2938737a297556c268c039a28165
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                DP_Touchpad.png
                • Path C:\Users\Admin\AppData\Local\Temp\ext\img\installation\drivers\DP_Touchpad.png
                • Size 888B
                • SHA256 025e7e8699fd9c246452c6634d4935149baa6a6acadb91b0f9adf52d11a094f9
                • MD5 SHA1 SHA512 TLSH
                Submit Download

                arrow-recommend.png
                • Path C:\Users\Admin\AppData\Local\Temp\ext\img\new-ui-assistant\arrow-recommend.png
                • Size 1KB
                • SHA256 fd42158b4e01b5c86360c9450e9e3db5e399e0eadb28e5420ac69f7da1dc0fc5
                • MD5 SHA1 SHA512 TLSH
                Submit Download

                icon-footer-splite.png
                • Path C:\Users\Admin\AppData\Local\Temp\ext\img\new-ui-assistant\icon-footer-splite.png
                • Size 4KB
                • SHA256 5e45160ca10f9237661f7c76880f1fed2dc5d2e147061daeeac7080df1502774
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                arrow-top.png
                • Path C:\Users\Admin\AppData\Local\Temp\ext\img\screens\arrow-top.png
                • Size 2KB
                • SHA256 4f2785a950320440acd22fcc0274944b971d5975de008f69bf81d19d44842925
                • MD5 SHA1 SHA512 TLSH
                Submit Download

                new-ui-logo2021.png
                • Path C:\Users\Admin\AppData\Local\Temp\ext\img\screens\new-ui-logo2021.png
                • Size 5KB
                • SHA256 a11af07103005c27c0a5f721d99482e4700c21c85afcbc8e44e4e785af5fa902
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                en.js
                • Path C:\Users\Admin\AppData\Local\Temp\ext\languages\en.js
                • Size 86KB
                • SHA256 a3df7c1b150504fb96555d8d7f7b9c4129a3225ba241da983d56a9c7a1404aec
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                run.hta
                • Path C:\Users\Admin\AppData\Local\Temp\ext\run.hta
                • Size 2KB
                • SHA256 02bd627d6825599ed039f053fecbe7f15000b5d5071e9b6baab488befa4f02dd
                • MD5 SHA1 SHA512 TLSH
                Submit Download

                start.bat
                • Path C:\Users\Admin\AppData\Local\Temp\ext\start.bat
                • Size 90B
                • SHA256 88ebe6fc9f45e734243dd674a3cdd9222be692bde089d0bc06726dd32156b892
                • MD5 SHA1 SHA512 TLSH
                Submit Download

                driverpack-wget.exe
                • Path C:\Users\Admin\AppData\Local\Temp\ext\tools\driverpack-wget.exe
                • Size 392KB
                • SHA256 a48ad33695a44de887bba8f2f3174fd8fb01a46a19e3ec9078b0118647ccf599
                • MD5 SHA1 SHA512 SSDEEP TLSH
                Submit Download

                run_command_1217.txt
                • Path C:\Users\Admin\AppData\Roaming\DRPSu\temp\run_command_1217.txt
                • Size 9B
                • SHA256 51e6af14fa1e9032300dbf76a85cb8561e523e89c363cec09cdc2128801a191d
                • MD5 SHA1 SHA512
                Submit Download

                run_command_69828.txt
                • Path C:\Users\Admin\AppData\Roaming\DRPSu\temp\run_command_69828.txt
                • Size 9B
                • SHA256 195418a93d769a17558aa804568eff487979e62d0731aa8c63d8d0ffc1723321
                • MD5 SHA1 SHA512
                Submit Download

                wget_finished_45332.txt
                • Path C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_45332.txt
                • Size 7B
                • SHA256 9a25234ae91ada142892f61bb4a52640d8854872909068b7b1c307a8e16591ed
                • MD5 SHA1 SHA512
                Submit Download

                wget_log_20482.log
                • Path C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_20482.log
                • Size 1KB
                • SHA256 9edc1a2add84384b8ba73be231206a3a8c82ab306410e4c7613219064bd27480
                • MD5 SHA1 SHA512 TLSH
                Submit Download

                wget_log_23043.log
                • Path C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_23043.log
                • Size 1KB
                • SHA256 a9ac53d594a2b8ab585695d6b9b8aab4426f40b0759f43047488f148099f5b7a
                • MD5 SHA1 SHA512 TLSH
                Submit Download

                wget_log_23465.log
                • Path C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_23465.log
                • Size 1KB
                • SHA256 0046b46dfe4698ae797e9dd2a7ede016bb77560fa3c8f92de2b864f8bf1c0479
                • MD5 SHA1 SHA512 TLSH
                Submit Download

                wget_log_25915.log
                • Path C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_25915.log
                • Size 1KB
                • SHA256 6284e7bff31a7e8fc53e6b1f8a77ce7d54a536cc96bd891539ef341263f4fe2b
                • MD5 SHA1 SHA512 TLSH
                Submit Download

                wget_log_26453.log
                • Path C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_26453.log
                • Size 1KB
                • SHA256 25f97e0c26201bfdfb5dcb8ed71326495fb62e852c58bd17cd26c3cd4af4ab01
                • MD5 SHA1 SHA512 TLSH
                Submit Download

                wget_log_38932.log
                • Path C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_38932.log
                • Size 1KB
                • SHA256 61f250933299751a8074b10081715017eb87a63ea54105e9a8fb8e6eb25888de
                • MD5 SHA1 SHA512 TLSH
                Submit Download

                wget_log_45332.log
                • Path C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_45332.log
                • Size 1KB
                • SHA256 252d678af3267e8a13fe18a851d49d90c69430b30f677e5d61db8e55f5921d7d
                • MD5 SHA1 SHA512 TLSH
                Submit Download

                wget_log_54032.log
                • Path C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_54032.log
                • Size 1KB
                • SHA256 58efc90cfe6fb441d5dcc850c879eda583d7e61ad560959ba94d420109ec6043
                • MD5 SHA1 SHA512 TLSH
                Submit Download

                wget_log_54054.log
                • Path C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_54054.log
                • Size 1KB
                • SHA256 0820a0965e9635006e2d585e14a6da50a0463a2938ec734aa5569f920caa587d
                • MD5 SHA1 SHA512 TLSH
                Submit Download

                wget_log_55837.log
                • Path C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_55837.log
                • Size 1KB
                • SHA256 caf40b0bac22f869ebaea60c0304fdb00f68138fc20035694ea5c084c9d03a8e
                • MD5 SHA1 SHA512 TLSH
                Submit Download

                wget_log_58738.log
                • Path C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_58738.log
                • Size 1KB
                • SHA256 74d96ec04ccb40badfb99957cb2be3acbfbe34e0a4fc9329061a579aa79b4192
                • MD5 SHA1 SHA512 TLSH
                Submit Download

                wget_log_63766.log
                • Path C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_63766.log
                • Size 1KB
                • SHA256 b624ad21bc8d9723d7ea3ce5d412746719931a7351f88121a2fd81a89622eeb4
                • MD5 SHA1 SHA512 TLSH
                Submit Download

                wget_log_64456.log
                • Path C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_64456.log
                • Size 1KB
                • SHA256 32bbe489c116e99caf834376fe2100215013aa29773be392263626f7e32914d0
                • MD5 SHA1 SHA512 TLSH
                Submit Download

                wget_log_77142.log
                • Path C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_77142.log
                • Size 1KB
                • SHA256 307b4f7ffa50d1f73a7d81e2d925ecd27114f21f7f360116d06046fabc62a680
                • MD5 SHA1 SHA512 TLSH
                Submit Download

                wget_log_84937.log
                • Path C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_84937.log
                • Size 1KB
                • SHA256 ebcfa553f198401c9bfd115635b648c680924a68802c6e348f5fa8b75a72152d
                • MD5 SHA1 SHA512 TLSH
                Submit Download

                wget_log_9472.log
                • Path C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_9472.log
                • Size 1KB
                • SHA256 24d34c2d60d67c2fcbdc25082c5ccc213da85292869932ab69fda8e7b06e5934
                • MD5 SHA1 SHA512 TLSH
                Submit Download

                memory/244-1525-0x0000000000400000-0x00000000004EF000-memory.dmp
                Download

                memory/256-1637-0x0000000000400000-0x00000000004EF000-memory.dmp
                Download

                memory/568-1529-0x0000000000400000-0x00000000004EF000-memory.dmp
                Download

                memory/616-1754-0x0000000000400000-0x00000000004EF000-memory.dmp
                Download

                memory/952-1477-0x0000000000400000-0x00000000004EF000-memory.dmp
                Download

                memory/1044-1585-0x0000000000400000-0x00000000004EF000-memory.dmp
                Download

                memory/1144-1362-0x0000000000400000-0x00000000004EF000-memory.dmp
                Download

                memory/1476-1721-0x0000000000400000-0x00000000004EF000-memory.dmp
                Download

                memory/1488-1635-0x0000000000400000-0x00000000004EF000-memory.dmp
                Download

                memory/1724-1587-0x0000000000400000-0x00000000004EF000-memory.dmp
                Download

                memory/1840-1686-0x0000000000400000-0x00000000004EF000-memory.dmp
                Download

                memory/1840-1560-0x0000000000400000-0x00000000004EF000-memory.dmp
                Download

                memory/1856-1658-0x0000000000400000-0x00000000004EF000-memory.dmp
                Download

                memory/1868-1539-0x0000000000400000-0x00000000004EF000-memory.dmp
                Download

                memory/1900-1267-0x0000000000400000-0x00000000004EF000-memory.dmp
                Download

                memory/1912-1504-0x0000000000400000-0x00000000004EF000-memory.dmp
                Download

                memory/2144-1618-0x0000000000400000-0x00000000004EF000-memory.dmp
                Download

                memory/2336-1452-0x0000000000400000-0x00000000004EF000-memory.dmp
                Download

                memory/2368-1455-0x0000000000400000-0x00000000004EF000-memory.dmp
                Download

                memory/2436-1617-0x0000000000400000-0x00000000004EF000-memory.dmp
                Download

                memory/2772-1681-0x0000000000400000-0x00000000004EF000-memory.dmp
                Download

                memory/2804-1431-0x0000000000400000-0x00000000004EF000-memory.dmp
                Download

                memory/2804-1421-0x0000000000400000-0x00000000004EF000-memory.dmp
                Download

                memory/3160-1586-0x0000000000400000-0x00000000004EF000-memory.dmp
                Download

                memory/3396-1661-0x0000000000400000-0x00000000004EF000-memory.dmp
                Download

                memory/3576-1273-0x0000000000400000-0x00000000004EF000-memory.dmp
                Download

                memory/3816-1274-0x0000000000400000-0x00000000004EF000-memory.dmp
                Download

                memory/3816-1244-0x0000000000400000-0x00000000004EF000-memory.dmp
                Download

                memory/3904-1288-0x0000000000400000-0x00000000004EF000-memory.dmp
                Download

                memory/3904-1278-0x0000000000400000-0x00000000004EF000-memory.dmp
                Download

                memory/4328-1333-0x0000000000400000-0x00000000004EF000-memory.dmp
                Download

                memory/4328-1321-0x0000000000400000-0x00000000004EF000-memory.dmp
                Download

                memory/4436-1505-0x0000000000400000-0x00000000004EF000-memory.dmp
                Download

                memory/4532-1322-0x0000000000400000-0x00000000004EF000-memory.dmp
                Download

                memory/4532-1332-0x0000000000400000-0x00000000004EF000-memory.dmp
                Download

                memory/4544-1547-0x0000000000400000-0x00000000004EF000-memory.dmp
                Download

                memory/4548-1541-0x0000000000400000-0x00000000004EF000-memory.dmp
                Download

                memory/4596-1659-0x0000000000400000-0x00000000004EF000-memory.dmp
                Download

                memory/4680-1742-0x0000000000400000-0x00000000004EF000-memory.dmp
                Download

                memory/4680-1726-0x0000000000400000-0x00000000004EF000-memory.dmp
                Download

                memory/4732-1456-0x0000000000400000-0x00000000004EF000-memory.dmp
                Download

                memory/4832-1748-0x0000000000400000-0x00000000004EF000-memory.dmp
                Download

                memory/4852-1329-0x0000000000400000-0x00000000004EF000-memory.dmp
                Download

                memory/4852-1340-0x0000000000400000-0x00000000004EF000-memory.dmp
                Download

                memory/4892-1460-0x0000000000400000-0x00000000004EF000-memory.dmp
                Download

                memory/4892-1472-0x0000000000400000-0x00000000004EF000-memory.dmp
                Download

                memory/4976-1599-0x0000000000400000-0x00000000004EF000-memory.dmp
                Download

                memory/5176-1367-0x0000000000400000-0x00000000004EF000-memory.dmp
                Download

                memory/5228-1716-0x0000000000400000-0x00000000004EF000-memory.dmp
                Download

                memory/5436-1697-0x0000000000400000-0x00000000004EF000-memory.dmp
                Download

                memory/5436-1691-0x0000000000400000-0x00000000004EF000-memory.dmp
                Download

                memory/5628-1640-0x0000000000400000-0x00000000004EF000-memory.dmp
                Download

                memory/5632-1353-0x0000000000400000-0x00000000004EF000-memory.dmp
                Download

                memory/5680-1347-0x0000000000400000-0x00000000004EF000-memory.dmp
                Download

                memory/5680-1612-0x0000000000400000-0x00000000004EF000-memory.dmp
                Download

                memory/5800-1494-0x0000000000400000-0x00000000004EF000-memory.dmp
                Download

                memory/5896-1395-0x0000000000400000-0x00000000004EF000-memory.dmp
                Download

                memory/6028-1366-0x0000000000400000-0x00000000004EF000-memory.dmp
                Download

                memory/6044-1397-0x0000000000400000-0x00000000004EF000-memory.dmp
                Download

                memory/6136-1760-0x0000000000400000-0x00000000004EF000-memory.dmp
                Download

                memory/6140-1386-0x0000000000400000-0x00000000004EF000-memory.dmp
                Download