donutloader | 61969b56f92f32de602d7c01fda788f9ab46a916df56fea95330b2e68b409a20

Analysis

max time kernel
150s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/08/2026, 03:28

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
Size 396KB
Sample260802-d1m6lsce76
SHA256 61969b56f92f32de602d7c01fda788f9ab46a916df56fea95330b2e68b409a20
MD5 21bdb1c9e870c5baca34f50a86a3fadc
SHA1 cf1de8a84a09a174035d336b7c8ab8814bf03164
SHA512 37eef4d149e6db5ee77e1e5036061cc9565781e5ac4d56de4c9ea044b9fd1a37510530d40e3d000b02a33c0c97e916501288b3b059721aac218929ede1e2fc6d
SSDEEP 12288:mz1RwD9JRipA0OVrtZukeKTX2FA86KePzlU6JB:U1R8BTX2O8LQzZ
TLSH
T1FD848C25B7946996E0BF453CD468024A83B1B9768712DBCFAFE4499A0E723D0DE30F53
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

donutloader loader

Malware Config

Signatures

Family: DonutLoader
DonutLoader is a position-independent code that enables in-memory execution of VBScript, JScript, EXE, DLL files and dotNET assemblies.
loader donutloader

Detects DonutLoader 1 IoCs

loader

resource	yara_rule
behavioral1/memory/5796-0-0x0000027B93BB0000-0x0000027B93BF9000-memory.dmp	family_donutloader

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 5796 wrote to memory of 5448	5796	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	87
PID 5448 wrote to memory of 3308	5448	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	91
PID 3308 wrote to memory of 5492	3308	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	92
PID 5492 wrote to memory of 2268	5492	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	95
PID 2268 wrote to memory of 3536	2268	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	96
PID 3536 wrote to memory of 2128	3536	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	99
PID 2128 wrote to memory of 3012	2128	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	101
PID 3012 wrote to memory of 6128	3012	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	104
PID 6128 wrote to memory of 4588	6128	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	105
PID 4588 wrote to memory of 1960	4588	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	108
PID 1960 wrote to memory of 2568	1960	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	109
PID 2568 wrote to memory of 1796	2568	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	112
PID 1796 wrote to memory of 2192	1796	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	113
PID 2192 wrote to memory of 5520	2192	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	116
PID 5520 wrote to memory of 4532	5520	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	117
PID 4532 wrote to memory of 4488	4532	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	120
PID 4488 wrote to memory of 1632	4488	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	121
PID 1632 wrote to memory of 3024	1632	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	124
PID 3024 wrote to memory of 3664	3024	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	125
PID 3664 wrote to memory of 4624	3664	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	128
PID 4624 wrote to memory of 4852	4624	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	129
PID 4852 wrote to memory of 4628	4852	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	132
PID 4628 wrote to memory of 1932	4628	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	133
PID 1932 wrote to memory of 4372	1932	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	136
PID 4372 wrote to memory of 1484	4372	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	137
PID 1484 wrote to memory of 5968	1484	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	140
PID 5968 wrote to memory of 312	5968	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	141
PID 312 wrote to memory of 3916	312	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	144
PID 3916 wrote to memory of 216	3916	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	145
PID 216 wrote to memory of 2476	216	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	148
PID 2476 wrote to memory of 6012	2476	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	149
PID 6012 wrote to memory of 4396	6012	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	152
PID 4396 wrote to memory of 4732	4396	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	153
PID 4732 wrote to memory of 3896	4732	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	156
PID 3896 wrote to memory of 5904	3896	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	157
PID 5904 wrote to memory of 2440	5904	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	160
PID 2440 wrote to memory of 4964	2440	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	161
PID 4964 wrote to memory of 5880	4964	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	164
PID 5880 wrote to memory of 4356	5880	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	165
PID 4356 wrote to memory of 4312	4356	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	168
PID 4312 wrote to memory of 4400	4312	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	169
PID 4400 wrote to memory of 5052	4400	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	172
PID 5052 wrote to memory of 1232	5052	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	173
PID 1232 wrote to memory of 5900	1232	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	176
PID 5900 wrote to memory of 5104	5900	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	177
PID 5104 wrote to memory of 4792	5104	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	180
PID 4792 wrote to memory of 2068	4792	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	181
PID 2068 wrote to memory of 2084	2068	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	184
PID 2084 wrote to memory of 1892	2084	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	185
PID 1892 wrote to memory of 5852	1892	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	188
PID 5852 wrote to memory of 5440	5852	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	189
PID 5440 wrote to memory of 2940	5440	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	192
PID 2940 wrote to memory of 1284	2940	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	193
PID 1284 wrote to memory of 4728	1284	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	196
PID 4728 wrote to memory of 1572	4728	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	197
PID 1572 wrote to memory of 3692	1572	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	200
PID 3692 wrote to memory of 5128	3692	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	201
PID 5128 wrote to memory of 1884	5128	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	204
PID 1884 wrote to memory of 4840	1884	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	205
PID 4840 wrote to memory of 5764	4840	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	208
PID 5764 wrote to memory of 5860	5764	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	209
PID 5860 wrote to memory of 2000	5860	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	212
PID 2000 wrote to memory of 3292	2000	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	213
PID 3292 wrote to memory of 3144	3292	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	216

C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:5796
- C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
  "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 5796
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:5448
- - C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:3308
  - - C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
      "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 3308
      4⤵
      Suspicious use of WriteProcessMemory
      PID:5492
    - - C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        5⤵
        Suspicious use of WriteProcessMemory
        
        PID:2268
      - C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 2268
        6⤵
        Suspicious use of WriteProcessMemory
        
        PID:3536
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        7⤵
        Suspicious use of WriteProcessMemory
        
        PID:2128
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 2128
        8⤵
        Suspicious use of WriteProcessMemory
        
        PID:3012
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        9⤵
        Suspicious use of WriteProcessMemory
        
        PID:6128
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 6128
        10⤵
        Suspicious use of WriteProcessMemory
        
        PID:4588
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        11⤵
        Suspicious use of WriteProcessMemory
        
        PID:1960
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 1960
        12⤵
        Suspicious use of WriteProcessMemory
        
        PID:2568
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        13⤵
        Suspicious use of WriteProcessMemory
        
        PID:1796
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 1796
        14⤵
        Suspicious use of WriteProcessMemory
        
        PID:2192
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        15⤵
        Suspicious use of WriteProcessMemory
        
        PID:5520
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 5520
        16⤵
        Suspicious use of WriteProcessMemory
        
        PID:4532
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        17⤵
        Suspicious use of WriteProcessMemory
        
        PID:4488
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4488
        18⤵
        Suspicious use of WriteProcessMemory
        
        PID:1632
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        19⤵
        Suspicious use of WriteProcessMemory
        
        PID:3024
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 3024
        20⤵
        Suspicious use of WriteProcessMemory
        
        PID:3664
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        21⤵
        Suspicious use of WriteProcessMemory
        
        PID:4624
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4624
        22⤵
        Suspicious use of WriteProcessMemory
        
        PID:4852
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        23⤵
        Suspicious use of WriteProcessMemory
        
        PID:4628
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4628
        24⤵
        Suspicious use of WriteProcessMemory
        
        PID:1932
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        25⤵
        Suspicious use of WriteProcessMemory
        
        PID:4372
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4372
        26⤵
        Suspicious use of WriteProcessMemory
        
        PID:1484
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        27⤵
        Suspicious use of WriteProcessMemory
        
        PID:5968
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 5968
        28⤵
        Suspicious use of WriteProcessMemory
        
        PID:312
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        29⤵
        Suspicious use of WriteProcessMemory
        
        PID:3916
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 3916
        30⤵
        Suspicious use of WriteProcessMemory
        
        PID:216
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        31⤵
        Suspicious use of WriteProcessMemory
        
        PID:2476
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 2476
        32⤵
        Suspicious use of WriteProcessMemory
        
        PID:6012
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        33⤵
        Suspicious use of WriteProcessMemory
        
        PID:4396
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4396
        34⤵
        Suspicious use of WriteProcessMemory
        
        PID:4732
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        35⤵
        Suspicious use of WriteProcessMemory
        
        PID:3896
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 3896
        36⤵
        Suspicious use of WriteProcessMemory
        
        PID:5904
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        37⤵
        Suspicious use of WriteProcessMemory
        
        PID:2440
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 2440
        38⤵
        Suspicious use of WriteProcessMemory
        
        PID:4964
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        39⤵
        Suspicious use of WriteProcessMemory
        
        PID:5880
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 5880
        40⤵
        Suspicious use of WriteProcessMemory
        
        PID:4356
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        41⤵
        Suspicious use of WriteProcessMemory
        
        PID:4312
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4312
        42⤵
        Suspicious use of WriteProcessMemory
        
        PID:4400
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        43⤵
        Suspicious use of WriteProcessMemory
        
        PID:5052
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 5052
        44⤵
        Suspicious use of WriteProcessMemory
        
        PID:1232
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        45⤵
        Suspicious use of WriteProcessMemory
        
        PID:5900
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 5900
        46⤵
        Suspicious use of WriteProcessMemory
        
        PID:5104
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        47⤵
        Suspicious use of WriteProcessMemory
        
        PID:4792
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4792
        48⤵
        Suspicious use of WriteProcessMemory
        
        PID:2068
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        49⤵
        Suspicious use of WriteProcessMemory
        
        PID:2084
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 2084
        50⤵
        Suspicious use of WriteProcessMemory
        
        PID:1892
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        51⤵
        Suspicious use of WriteProcessMemory
        
        PID:5852
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 5852
        52⤵
        Suspicious use of WriteProcessMemory
        
        PID:5440
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        53⤵
        Suspicious use of WriteProcessMemory
        
        PID:2940
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 2940
        54⤵
        Suspicious use of WriteProcessMemory
        
        PID:1284
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        55⤵
        Suspicious use of WriteProcessMemory
        
        PID:4728
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4728
        56⤵
        Suspicious use of WriteProcessMemory
        
        PID:1572
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        57⤵
        Suspicious use of WriteProcessMemory
        
        PID:3692
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 3692
        58⤵
        Suspicious use of WriteProcessMemory
        
        PID:5128
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        59⤵
        Suspicious use of WriteProcessMemory
        
        PID:1884
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 1884
        60⤵
        Suspicious use of WriteProcessMemory
        
        PID:4840
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        61⤵
        Suspicious use of WriteProcessMemory
        
        PID:5764
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 5764
        62⤵
        Suspicious use of WriteProcessMemory
        
        PID:5860
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        63⤵
        Suspicious use of WriteProcessMemory
        
        PID:2000
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 2000
        64⤵
        Suspicious use of WriteProcessMemory
        
        PID:3292
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        65⤵
        
        PID:3144
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 3144
        66⤵
        
        PID:2392
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        67⤵
        
        PID:556
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 556
        68⤵
        
        PID:2332
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        69⤵
        
        PID:2848
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 2848
        70⤵
        
        PID:1480
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        71⤵
        
        PID:636
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 636
        72⤵
        
        PID:5328
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        73⤵
        
        PID:3436
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 3436
        74⤵
        
        PID:4468
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        75⤵
        
        PID:4460
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4460
        76⤵
        
        PID:5692
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        77⤵
        
        PID:3656
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 3656
        78⤵
        
        PID:3564
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        79⤵
        
        PID:4100
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4100
        80⤵
        
        PID:3188
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        81⤵
        
        PID:5100
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 5100
        82⤵
        
        PID:5876
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        83⤵
        
        PID:1304
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 1304
        84⤵
        
        PID:4240
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        85⤵
        
        PID:224
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 224
        86⤵
        
        PID:5208
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        87⤵
        
        PID:4848
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4848
        88⤵
        
        PID:5020
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        89⤵
        
        PID:4604
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4604
        90⤵
        
        PID:5108
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        91⤵
        
        PID:3552
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 3552
        92⤵
        
        PID:2428
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        93⤵
        
        PID:4464
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4464
        94⤵
        
        PID:564
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        95⤵
        
        PID:5808
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 5808
        96⤵
        
        PID:3180
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        97⤵
        
        PID:2052
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 2052
        98⤵
        
        PID:5152
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        99⤵
        
        PID:4836
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4836
        100⤵
        
        PID:1512
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        101⤵
        
        PID:1064
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 1064
        102⤵
        
        PID:2748
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        103⤵
        
        PID:4596
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4596
        104⤵
        
        PID:5632
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        105⤵
        
        PID:4300
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4300
        106⤵
        
        PID:1716
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        107⤵
        
        PID:4044
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4044
        108⤵
        
        PID:4552
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        109⤵
        
        PID:1896
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 1896
        110⤵
        
        PID:5648
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        111⤵
        
        PID:4884
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4884
        112⤵
        
        PID:2056
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        113⤵
        
        PID:3928
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 3928
        114⤵
        
        PID:1504
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        115⤵
        
        PID:4608
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4608
        116⤵
        
        PID:5620
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        117⤵
        
        PID:644
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 644
        118⤵
        
        PID:1976
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        119⤵
        
        PID:3600
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 3600
        120⤵
        
        PID:860
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        121⤵
        
        PID:4784
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4784
        122⤵
        
        PID:3952
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        123⤵
        
        PID:4560
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4560
        124⤵
        
        PID:1412
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        125⤵
        
        PID:4668
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4668
        126⤵
        
        PID:3756
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        127⤵
        
        PID:756
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 756
        128⤵
        
        PID:4992
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        129⤵
        
        PID:516
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 516
        130⤵
        
        PID:1836
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        131⤵
        
        PID:5044
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 5044
        132⤵
        
        PID:752
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        133⤵
        
        PID:5728
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 5728
        134⤵
        
        PID:1136
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        135⤵
        
        PID:3840
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 3840
        136⤵
        
        PID:1628
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        137⤵
        
        PID:5288
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 5288
        138⤵
        
        PID:5248
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        139⤵
        
        PID:976
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 976
        140⤵
        
        PID:1772
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        141⤵
        
        PID:3168
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 3168
        142⤵
        
        PID:1820
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        143⤵
        
        PID:572
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 572
        144⤵
        
        PID:5708
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        145⤵
        
        PID:736
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 736
        146⤵
        
        PID:4924
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        147⤵
        
        PID:5192
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 5192
        148⤵
        
        PID:3252
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        149⤵
        
        PID:4248
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4248
        150⤵
        
        PID:1408
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        151⤵
        
        PID:2824
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 2824
        152⤵
        
        PID:1748
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        153⤵
        
        PID:3908
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 3908
        154⤵
        
        PID:4432
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        155⤵
        
        PID:692
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 692
        156⤵
        
        PID:1780
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        157⤵
        
        PID:540
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 540
        158⤵
        
        PID:3244
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        159⤵
        
        PID:4456
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4456
        160⤵
        
        PID:3288
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        161⤵
        
        PID:1220
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 1220
        162⤵
        
        PID:2964
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        163⤵
        
        PID:3644
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 3644
        164⤵
        
        PID:4000
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        165⤵
        
        PID:3336
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 3336
        166⤵
        
        PID:4692
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        167⤵
        
        PID:5920
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 5920
        168⤵
        
        PID:4328
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        169⤵
        
        PID:3464
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 3464
        170⤵
        
        PID:220
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        171⤵
        
        PID:5788
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 5788
        172⤵
        
        PID:5536
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        173⤵
        
        PID:2400
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 2400
        174⤵
        
        PID:3892
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        175⤵
        
        PID:3256
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 3256
        176⤵
        
        PID:4912
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        177⤵
        
        PID:888
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 888
        178⤵
        
        PID:1428
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        179⤵
        
        PID:4716
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4716
        180⤵
        
        PID:2660
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        181⤵
        
        PID:3456
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 3456
        182⤵
        
        PID:5080
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        183⤵
        
        PID:5528
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 5528
        184⤵
        
        PID:2644
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        185⤵
        
        PID:2124
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 2124
        186⤵
        
        PID:4672
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        187⤵
        
        PID:4308
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4308
        188⤵
        
        PID:5848
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        189⤵
        
        PID:560
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 560
        190⤵
        
        PID:2232
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        191⤵
        
        PID:4880
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4880
        192⤵
        
        PID:3000
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        193⤵
        
        PID:1900
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 1900
        194⤵
        
        PID:600
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        195⤵
        
        PID:3060
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 3060
        196⤵
        
        PID:1908
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        197⤵
        
        PID:5392
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 5392
        198⤵
        
        PID:5380
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        199⤵
        
        PID:2076
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 2076
        200⤵
        
        PID:4404
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        201⤵
        
        PID:4612
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4612
        202⤵
        
        PID:6136
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        203⤵
        
        PID:3648
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 3648
        204⤵
        
        PID:4564
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        205⤵
        
        PID:4856
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4856
        206⤵
        
        PID:4696
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        207⤵
        
        PID:2624
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 2624
        208⤵
        
        PID:1860
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        209⤵
        
        PID:2348
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 2348
        210⤵
        
        PID:1140
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        211⤵
        
        PID:2368
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 2368
        212⤵
        
        PID:116
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        213⤵
        
        PID:4932
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4932
        214⤵
        
        PID:6044
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        215⤵
        
        PID:4120
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4120
        216⤵
        
        PID:1240
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        217⤵
        
        PID:2620
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 2620
        218⤵
        
        PID:2060
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        219⤵
        
        PID:2500
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 2500
        220⤵
        
        PID:1280
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        221⤵
        
        PID:1264
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 1264
        222⤵
        
        PID:5516
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        223⤵
        
        PID:2168
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 2168
        224⤵
        
        PID:4812
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        225⤵
        
        PID:5548
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 5548
        226⤵
        
        PID:5324
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        227⤵
        
        PID:1468
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 1468
        228⤵
        
        PID:4940
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        229⤵
        
        PID:4868
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4868
        230⤵
        
        PID:6084
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        231⤵
        
        PID:3248
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 3248
        232⤵
        
        PID:3712
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        233⤵
        
        PID:4140
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4140
        234⤵
        
        PID:3860
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        235⤵
        
        PID:816
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 816
        236⤵
        
        PID:4420
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        237⤵
        
        PID:6120
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 6120
        238⤵
        
        PID:1216
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        239⤵
        
        PID:4592
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4592
        240⤵
        
        PID:3104
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        241⤵
        
        PID:5092
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 5092
        242⤵
        
        PID:4772
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        243⤵
        
        PID:1744
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 1744
        244⤵
        
        PID:4664
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        245⤵
        
        PID:4572
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4572
        246⤵
        
        PID:4540
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        247⤵
        
        PID:2104
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 2104
        248⤵
        
        PID:8
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        249⤵
        
        PID:5496
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 5496
        250⤵
        
        PID:2556
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        251⤵
        
        PID:3936
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 3936
        252⤵
        
        PID:4824
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        253⤵
        
        PID:6056
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 6056
        254⤵
        
        PID:5784
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        255⤵
        
        PID:912
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 912
        256⤵
        
        PID:4804
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        257⤵
        
        PID:6140
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 6140
        258⤵
        
        PID:6004
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        259⤵
        
        PID:5048
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 5048
        260⤵
        
        PID:2680
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        261⤵
        
        PID:5780
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 5780
        262⤵
        
        PID:5828
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        263⤵
        
        PID:2764
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 2764
        264⤵
        
        PID:4292
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        265⤵
        
        PID:3832
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 3832
        266⤵
        
        PID:4304
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        267⤵
        
        PID:4124
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4124
        268⤵
        
        PID:1496
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        269⤵
        
        PID:3452
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 3452
        270⤵
        
        PID:4544
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        271⤵
        
        PID:3640
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 3640
        272⤵
        
        PID:1556
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        273⤵
        
        PID:5116
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 5116
        274⤵
        
        PID:3356
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        275⤵
        
        PID:4260
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4260
        276⤵
        
        PID:4648
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        277⤵
        
        PID:3504
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 3504
        278⤵
        
        PID:3752
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        279⤵
        
        PID:1812
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 1812
        280⤵
        
        PID:3304
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        281⤵
        
        PID:1012
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 1012
        282⤵
        
        PID:1080
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        283⤵
        
        PID:5068
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 5068
        284⤵
        
        PID:5016
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        285⤵
        
        PID:2432
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 2432
        286⤵
        
        PID:5748
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        287⤵
        
        PID:6028
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 6028
        288⤵
        
        PID:2972
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        289⤵
        
        PID:1076
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 1076
        290⤵
        
        PID:4788
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        291⤵
        
        PID:2724
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 2724
        292⤵
        
        PID:544
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        293⤵
        
        PID:5488
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 5488
        294⤵
        
        PID:3176
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        295⤵
        
        PID:5264
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 5264
        296⤵
        
        PID:5124
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        297⤵
        
        PID:6040
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 6040
        298⤵
        
        PID:3852
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        299⤵
        
        PID:5436
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 5436
        300⤵
        
        PID:6092
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        301⤵
        
        PID:4500
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4500
        302⤵
        
        PID:5824
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        303⤵
        
        PID:5428
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 5428
        304⤵
        
        PID:1792
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        305⤵
        
        PID:4976
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4976
        306⤵
        
        PID:5980
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        307⤵
        
        PID:4276
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4276
        308⤵
        
        PID:5836
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        309⤵
        
        PID:5076
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 5076
        310⤵
        
        PID:6088
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        311⤵
        
        PID:3440
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 3440
        312⤵
        
        PID:4752
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        313⤵
        
        PID:6052
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 6052
        314⤵
        
        PID:3940
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        315⤵
        
        PID:2020
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 2020
        316⤵
        
        PID:4760
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        317⤵
        
        PID:1724
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 1724
        318⤵
        
        PID:2352
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        319⤵
        
        PID:4108
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4108
        320⤵
        
        PID:4176
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        321⤵
        
        PID:928
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 928
        322⤵
        
        PID:3708
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        323⤵
        
        PID:1740
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 1740
        324⤵
        
        PID:1028
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        325⤵
        
        PID:2444
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 2444
        326⤵
        
        PID:4968
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        327⤵
        
        PID:4412
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4412
        328⤵
        
        PID:3228
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        329⤵
        
        PID:1476
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 1476
        330⤵
        
        PID:2880
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        331⤵
        
        PID:1072
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 1072
        332⤵
        
        PID:2364
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        333⤵
        
        PID:960
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 960
        334⤵
        
        PID:5072
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        335⤵
        
        PID:3384
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 3384
        336⤵
        
        PID:2564
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        337⤵
        
        PID:5396
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 5396
        338⤵
        
        PID:3976
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        339⤵
        
        PID:5680
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 5680
        340⤵
        
        PID:1452
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        341⤵
        
        PID:2108
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 2108
        342⤵
        
        PID:640
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        343⤵
        
        PID:764
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 764
        344⤵
        
        PID:3008
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        345⤵
        
        PID:176
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 176
        346⤵
        
        PID:4780
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        347⤵
        
        PID:4908
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4908
        348⤵
        
        PID:4876
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        349⤵
        
        PID:5544
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 5544
        350⤵
        
        PID:2460
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        351⤵
        
        PID:3156
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 3156
        352⤵
        
        PID:4952
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        353⤵
        
        PID:6116
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 6116
        354⤵
        
        PID:1424
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        355⤵
        
        PID:5460
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 5460
        356⤵
        
        PID:5684
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        357⤵
        
        PID:4244
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4244
        358⤵
        
        PID:1500
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        359⤵
        
        PID:5560
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 5560
        360⤵
        
        PID:3740
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        361⤵
        
        PID:468
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 468
        362⤵
        
        PID:1400
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        363⤵
        
        PID:3816
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 3816
        364⤵
        
        PID:4012
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        365⤵
        
        PID:5236
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 5236
        366⤵
        
        PID:1720
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        367⤵
        
        PID:5364
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 5364
        368⤵
        
        PID:4936
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        369⤵
        
        PID:5712
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 5712
        370⤵
        
        PID:5472
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        371⤵
        
        PID:64
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 64
        372⤵
        
        PID:4656
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        373⤵
        
        PID:4228
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4228
        374⤵
        
        PID:472
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        375⤵
        
        PID:6104
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 6104
        376⤵
        
        PID:2164
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        377⤵
        
        PID:4700
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4700
        378⤵
        
        PID:2224
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        379⤵
        
        PID:4336
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4336
        380⤵
        
        PID:4916
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        381⤵
        
        PID:440
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 440
        382⤵
        
        PID:3556
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        383⤵
        
        PID:5088
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 5088
        384⤵
        
        PID:5404
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        385⤵
        
        PID:5532
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 5532
        386⤵
        
        PID:2776
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        387⤵
        
        PID:1224
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 1224
        388⤵
        
        PID:2384
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        389⤵
        
        PID:920
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 920
        390⤵
        
        PID:4680
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        391⤵
        
        PID:1324
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 1324
        392⤵
        
        PID:4616
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        393⤵
        
        PID:1148
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 1148
        394⤵
        
        PID:4332
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        395⤵
        
        PID:5408
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 5408
        396⤵
        
        PID:4020
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        397⤵
        
        PID:1984

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads