donutloader | 61969b56f92f32de602d7c01fda788f9ab46a916df56fea95330b2e68b409a20

Analysis

max time kernel
149s
max time network
152s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/08/2026, 03:28

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
Size 396KB
Sample260802-d1m6lsce76
SHA256 61969b56f92f32de602d7c01fda788f9ab46a916df56fea95330b2e68b409a20
MD5 21bdb1c9e870c5baca34f50a86a3fadc
SHA1 cf1de8a84a09a174035d336b7c8ab8814bf03164
SHA512 37eef4d149e6db5ee77e1e5036061cc9565781e5ac4d56de4c9ea044b9fd1a37510530d40e3d000b02a33c0c97e916501288b3b059721aac218929ede1e2fc6d
SSDEEP 12288:mz1RwD9JRipA0OVrtZukeKTX2FA86KePzlU6JB:U1R8BTX2O8LQzZ
TLSH
T1FD848C25B7946996E0BF453CD468024A83B1B9768712DBCFAFE4499A0E723D0DE30F53
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

donutloader loader

Malware Config

Signatures

Family: DonutLoader
DonutLoader is a position-independent code that enables in-memory execution of VBScript, JScript, EXE, DLL files and dotNET assemblies.
loader donutloader

Detects DonutLoader 1 IoCs

loader

resource	yara_rule
behavioral2/memory/4772-0-0x000002432ED20000-0x000002432ED69000-memory.dmp	family_donutloader

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4772 wrote to memory of 2236	4772	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	89
PID 2236 wrote to memory of 5048	2236	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	93
PID 5048 wrote to memory of 4636	5048	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	94
PID 4636 wrote to memory of 4580	4636	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	97
PID 4580 wrote to memory of 3428	4580	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	98
PID 3428 wrote to memory of 3252	3428	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	101
PID 3252 wrote to memory of 1512	3252	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	102
PID 1512 wrote to memory of 2676	1512	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	105
PID 2676 wrote to memory of 1616	2676	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	106
PID 1616 wrote to memory of 2740	1616	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	109
PID 2740 wrote to memory of 4832	2740	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	110
PID 4832 wrote to memory of 1280	4832	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	113
PID 1280 wrote to memory of 404	1280	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	114
PID 404 wrote to memory of 6132	404	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	117
PID 6132 wrote to memory of 1492	6132	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	118
PID 1492 wrote to memory of 5536	1492	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	121
PID 5536 wrote to memory of 1056	5536	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	122
PID 1056 wrote to memory of 2448	1056	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	125
PID 2448 wrote to memory of 6076	2448	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	126
PID 6076 wrote to memory of 2288	6076	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	129
PID 2288 wrote to memory of 5420	2288	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	130
PID 5420 wrote to memory of 5900	5420	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	133
PID 5900 wrote to memory of 4128	5900	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	134
PID 4128 wrote to memory of 412	4128	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	137
PID 412 wrote to memory of 1516	412	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	138
PID 1516 wrote to memory of 2088	1516	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	141
PID 2088 wrote to memory of 2688	2088	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	142
PID 2688 wrote to memory of 3308	2688	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	145
PID 3308 wrote to memory of 4912	3308	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	146
PID 4912 wrote to memory of 3400	4912	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	149
PID 3400 wrote to memory of 5060	3400	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	150
PID 5060 wrote to memory of 1484	5060	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	153
PID 1484 wrote to memory of 1420	1484	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	154
PID 1420 wrote to memory of 6032	1420	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	157
PID 6032 wrote to memory of 2672	6032	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	158
PID 2672 wrote to memory of 4492	2672	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	161
PID 4492 wrote to memory of 4900	4492	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	162
PID 4900 wrote to memory of 676	4900	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	165
PID 676 wrote to memory of 3424	676	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	166
PID 3424 wrote to memory of 2524	3424	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	169
PID 2524 wrote to memory of 1288	2524	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	170
PID 1288 wrote to memory of 1172	1288	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	173
PID 1172 wrote to memory of 5112	1172	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	174
PID 5112 wrote to memory of 5312	5112	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	177
PID 5312 wrote to memory of 5672	5312	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	178
PID 5672 wrote to memory of 2312	5672	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	181
PID 2312 wrote to memory of 3968	2312	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	182
PID 3968 wrote to memory of 3312	3968	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	185
PID 3312 wrote to memory of 1776	3312	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	186
PID 1776 wrote to memory of 5540	1776	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	189
PID 5540 wrote to memory of 2564	5540	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	190
PID 2564 wrote to memory of 3508	2564	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	193
PID 3508 wrote to memory of 1452	3508	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	194
PID 1452 wrote to memory of 4700	1452	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	197
PID 4700 wrote to memory of 560	4700	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	198
PID 560 wrote to memory of 4668	560	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	201
PID 4668 wrote to memory of 2176	4668	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	202
PID 2176 wrote to memory of 4336	2176	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	205
PID 4336 wrote to memory of 4500	4336	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	206
PID 4500 wrote to memory of 3472	4500	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	209
PID 3472 wrote to memory of 3892	3472	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	210
PID 3892 wrote to memory of 5480	3892	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	213
PID 5480 wrote to memory of 5604	5480	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	214
PID 5604 wrote to memory of 1504	5604	2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe	217

C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4772
- C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
  "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4772
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2236
- - C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:5048
  - - C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
      "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 5048
      4⤵
      Suspicious use of WriteProcessMemory
      PID:4636
    - - C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        5⤵
        Suspicious use of WriteProcessMemory
        
        PID:4580
      - C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4580
        6⤵
        Suspicious use of WriteProcessMemory
        
        PID:3428
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        7⤵
        Suspicious use of WriteProcessMemory
        
        PID:3252
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 3252
        8⤵
        Suspicious use of WriteProcessMemory
        
        PID:1512
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        9⤵
        Suspicious use of WriteProcessMemory
        
        PID:2676
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 2676
        10⤵
        Suspicious use of WriteProcessMemory
        
        PID:1616
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        11⤵
        Suspicious use of WriteProcessMemory
        
        PID:2740
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 2740
        12⤵
        Suspicious use of WriteProcessMemory
        
        PID:4832
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        13⤵
        Suspicious use of WriteProcessMemory
        
        PID:1280
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 1280
        14⤵
        Suspicious use of WriteProcessMemory
        
        PID:404
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        15⤵
        Suspicious use of WriteProcessMemory
        
        PID:6132
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 6132
        16⤵
        Suspicious use of WriteProcessMemory
        
        PID:1492
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        17⤵
        Suspicious use of WriteProcessMemory
        
        PID:5536
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 5536
        18⤵
        Suspicious use of WriteProcessMemory
        
        PID:1056
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        19⤵
        Suspicious use of WriteProcessMemory
        
        PID:2448
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 2448
        20⤵
        Suspicious use of WriteProcessMemory
        
        PID:6076
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        21⤵
        Suspicious use of WriteProcessMemory
        
        PID:2288
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 2288
        22⤵
        Suspicious use of WriteProcessMemory
        
        PID:5420
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        23⤵
        Suspicious use of WriteProcessMemory
        
        PID:5900
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 5900
        24⤵
        Suspicious use of WriteProcessMemory
        
        PID:4128
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        25⤵
        Suspicious use of WriteProcessMemory
        
        PID:412
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 412
        26⤵
        Suspicious use of WriteProcessMemory
        
        PID:1516
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        27⤵
        Suspicious use of WriteProcessMemory
        
        PID:2088
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 2088
        28⤵
        Suspicious use of WriteProcessMemory
        
        PID:2688
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        29⤵
        Suspicious use of WriteProcessMemory
        
        PID:3308
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 3308
        30⤵
        Suspicious use of WriteProcessMemory
        
        PID:4912
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        31⤵
        Suspicious use of WriteProcessMemory
        
        PID:3400
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 3400
        32⤵
        Suspicious use of WriteProcessMemory
        
        PID:5060
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        33⤵
        Suspicious use of WriteProcessMemory
        
        PID:1484
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 1484
        34⤵
        Suspicious use of WriteProcessMemory
        
        PID:1420
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        35⤵
        Suspicious use of WriteProcessMemory
        
        PID:6032
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 6032
        36⤵
        Suspicious use of WriteProcessMemory
        
        PID:2672
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        37⤵
        Suspicious use of WriteProcessMemory
        
        PID:4492
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4492
        38⤵
        Suspicious use of WriteProcessMemory
        
        PID:4900
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        39⤵
        Suspicious use of WriteProcessMemory
        
        PID:676
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 676
        40⤵
        Suspicious use of WriteProcessMemory
        
        PID:3424
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        41⤵
        Suspicious use of WriteProcessMemory
        
        PID:2524
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 2524
        42⤵
        Suspicious use of WriteProcessMemory
        
        PID:1288
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        43⤵
        Suspicious use of WriteProcessMemory
        
        PID:1172
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 1172
        44⤵
        Suspicious use of WriteProcessMemory
        
        PID:5112
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        45⤵
        Suspicious use of WriteProcessMemory
        
        PID:5312
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 5312
        46⤵
        Suspicious use of WriteProcessMemory
        
        PID:5672
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        47⤵
        Suspicious use of WriteProcessMemory
        
        PID:2312
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 2312
        48⤵
        Suspicious use of WriteProcessMemory
        
        PID:3968
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        49⤵
        Suspicious use of WriteProcessMemory
        
        PID:3312
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 3312
        50⤵
        Suspicious use of WriteProcessMemory
        
        PID:1776
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        51⤵
        Suspicious use of WriteProcessMemory
        
        PID:5540
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 5540
        52⤵
        Suspicious use of WriteProcessMemory
        
        PID:2564
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        53⤵
        Suspicious use of WriteProcessMemory
        
        PID:3508
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 3508
        54⤵
        Suspicious use of WriteProcessMemory
        
        PID:1452
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        55⤵
        Suspicious use of WriteProcessMemory
        
        PID:4700
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4700
        56⤵
        Suspicious use of WriteProcessMemory
        
        PID:560
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        57⤵
        Suspicious use of WriteProcessMemory
        
        PID:4668
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4668
        58⤵
        Suspicious use of WriteProcessMemory
        
        PID:2176
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        59⤵
        Suspicious use of WriteProcessMemory
        
        PID:4336
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4336
        60⤵
        Suspicious use of WriteProcessMemory
        
        PID:4500
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        61⤵
        Suspicious use of WriteProcessMemory
        
        PID:3472
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 3472
        62⤵
        Suspicious use of WriteProcessMemory
        
        PID:3892
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        63⤵
        Suspicious use of WriteProcessMemory
        
        PID:5480
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 5480
        64⤵
        Suspicious use of WriteProcessMemory
        
        PID:5604
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        65⤵
        
        PID:1504
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 1504
        66⤵
        
        PID:5708
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        67⤵
        
        PID:1664
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 1664
        68⤵
        
        PID:2568
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        69⤵
        
        PID:4616
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4616
        70⤵
        
        PID:5192
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        71⤵
        
        PID:5736
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 5736
        72⤵
        
        PID:2716
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        73⤵
        
        PID:4756
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4756
        74⤵
        
        PID:4352
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        75⤵
        
        PID:3228
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 3228
        76⤵
        
        PID:1636
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        77⤵
        
        PID:1488
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 1488
        78⤵
        
        PID:4084
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        79⤵
        
        PID:2032
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 2032
        80⤵
        
        PID:4428
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        81⤵
        
        PID:2132
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 2132
        82⤵
        
        PID:4120
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        83⤵
        
        PID:2172
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 2172
        84⤵
        
        PID:2232
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        85⤵
        
        PID:4488
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4488
        86⤵
        
        PID:4620
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        87⤵
        
        PID:1988
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 1988
        88⤵
        
        PID:5720
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        89⤵
        
        PID:1728
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 1728
        90⤵
        
        PID:3132
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        91⤵
        
        PID:3992
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 3992
        92⤵
        
        PID:3176
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        93⤵
        
        PID:3152
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 3152
        94⤵
        
        PID:1696
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        95⤵
        
        PID:4664
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4664
        96⤵
        
        PID:5568
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        97⤵
        
        PID:6004
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 6004
        98⤵
        
        PID:5824
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        99⤵
        
        PID:968
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 968
        100⤵
        
        PID:2528
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        101⤵
        
        PID:5428
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 5428
        102⤵
        
        PID:4264
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        103⤵
        
        PID:1144
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 1144
        104⤵
        
        PID:3660
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        105⤵
        
        PID:4148
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4148
        106⤵
        
        PID:1668
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        107⤵
        
        PID:5228
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 5228
        108⤵
        
        PID:248
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        109⤵
        
        PID:1920
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 1920
        110⤵
        
        PID:3496
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        111⤵
        
        PID:5552
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 5552
        112⤵
        
        PID:2820
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        113⤵
        
        PID:3972
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 3972
        114⤵
        
        PID:1192
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        115⤵
        
        PID:2544
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 2544
        116⤵
        
        PID:4432
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        117⤵
        
        PID:1168
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 1168
        118⤵
        
        PID:940
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        119⤵
        
        PID:4404
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4404
        120⤵
        
        PID:3204
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        121⤵
        
        PID:2120
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 2120
        122⤵
        
        PID:4496
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        123⤵
        
        PID:3156
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 3156
        124⤵
        
        PID:4804
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        125⤵
        
        PID:4528
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4528
        126⤵
        
        PID:5944
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        127⤵
        
        PID:5608
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 5608
        128⤵
        
        PID:1436
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        129⤵
        
        PID:3528
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 3528
        130⤵
        
        PID:912
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        131⤵
        
        PID:5652
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 5652
        132⤵
        
        PID:960
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        133⤵
        
        PID:5712
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 5712
        134⤵
        
        PID:6028
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        135⤵
        
        PID:3028
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 3028
        136⤵
        
        PID:2988
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        137⤵
        
        PID:2728
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 2728
        138⤵
        
        PID:5528
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        139⤵
        
        PID:5268
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 5268
        140⤵
        
        PID:4320
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        141⤵
        
        PID:3404
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 3404
        142⤵
        
        PID:3432
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        143⤵
        
        PID:3756
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 3756
        144⤵
        
        PID:2280
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        145⤵
        
        PID:4936
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4936
        146⤵
        
        PID:4328
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        147⤵
        
        PID:932
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 932
        148⤵
        
        PID:5444
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        149⤵
        
        PID:1688
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 1688
        150⤵
        
        PID:52
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        151⤵
        
        PID:6096
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 6096
        152⤵
        
        PID:1724
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        153⤵
        
        PID:1944
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 1944
        154⤵
        
        PID:4288
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        155⤵
        
        PID:4104
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4104
        156⤵
        
        PID:5996
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        157⤵
        
        PID:1736
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 1736
        158⤵
        
        PID:2908
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        159⤵
        
        PID:5044
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 5044
        160⤵
        
        PID:1072
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        161⤵
        
        PID:5328
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 5328
        162⤵
        
        PID:1400
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        163⤵
        
        PID:4792
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4792
        164⤵
        
        PID:1972
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        165⤵
        
        PID:2668
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 2668
        166⤵
        
        PID:2768
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        167⤵
        
        PID:1148
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 1148
        168⤵
        
        PID:4476
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        169⤵
        
        PID:2864
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 2864
        170⤵
        
        PID:1016
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        171⤵
        
        PID:6000
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 6000
        172⤵
        
        PID:4460
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        173⤵
        
        PID:2992
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 2992
        174⤵
        
        PID:4116
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        175⤵
        
        PID:2736
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 2736
        176⤵
        
        PID:3200
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        177⤵
        
        PID:2772
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 2772
        178⤵
        
        PID:6012
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        179⤵
        
        PID:4520
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4520
        180⤵
        
        PID:5224
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        181⤵
        
        PID:3984
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 3984
        182⤵
        
        PID:2320
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        183⤵
        
        PID:1156
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 1156
        184⤵
        
        PID:3600
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        185⤵
        
        PID:5584
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 5584
        186⤵
        
        PID:204
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        187⤵
        
        PID:5924
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 5924
        188⤵
        
        PID:5372
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        189⤵
        
        PID:4196
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4196
        190⤵
        
        PID:4840
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        191⤵
        
        PID:4848
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4848
        192⤵
        
        PID:1592
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        193⤵
        
        PID:1892
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 1892
        194⤵
        
        PID:4856
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        195⤵
        
        PID:1876
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 1876
        196⤵
        
        PID:5764
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        197⤵
        
        PID:3304
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 3304
        198⤵
        
        PID:1816
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        199⤵
        
        PID:3372
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 3372
        200⤵
        
        PID:6116
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        201⤵
        
        PID:4908
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4908
        202⤵
        
        PID:4780
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        203⤵
        
        PID:5524
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 5524
        204⤵
        
        PID:3820
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        205⤵
        
        PID:5732
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 5732
        206⤵
        
        PID:2548
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        207⤵
        
        PID:2732
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 2732
        208⤵
        
        PID:4252
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        209⤵
        
        PID:1976
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 1976
        210⤵
        
        PID:5172
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        211⤵
        
        PID:4360
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4360
        212⤵
        
        PID:4764
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        213⤵
        
        PID:4784
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4784
        214⤵
        
        PID:4572
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        215⤵
        
        PID:300
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 300
        216⤵
        
        PID:5132
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        217⤵
        
        PID:4928
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4928
        218⤵
        
        PID:6120
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        219⤵
        
        PID:4244
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4244
        220⤵
        
        PID:4752
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        221⤵
        
        PID:1896
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 1896
        222⤵
        
        PID:5424
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        223⤵
        
        PID:5700
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 5700
        224⤵
        
        PID:1404
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        225⤵
        
        PID:4960
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4960
        226⤵
        
        PID:5828
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        227⤵
        
        PID:3664
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 3664
        228⤵
        
        PID:4876
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        229⤵
        
        PID:5864
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 5864
        230⤵
        
        PID:716
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        231⤵
        
        PID:4308
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4308
        232⤵
        
        PID:2624
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        233⤵
        
        PID:3752
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 3752
        234⤵
        
        PID:1812
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        235⤵
        
        PID:5472
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 5472
        236⤵
        
        PID:3492
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        237⤵
        
        PID:5812
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 5812
        238⤵
        
        PID:2212
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        239⤵
        
        PID:1428
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 1428
        240⤵
        
        PID:3112
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        241⤵
        
        PID:5032
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 5032
        242⤵
        
        PID:2744
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        243⤵
        
        PID:5460
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 5460
        244⤵
        
        PID:4724
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        245⤵
        
        PID:4800
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4800
        246⤵
        
        PID:1132
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        247⤵
        
        PID:2348
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 2348
        248⤵
        
        PID:3408
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        249⤵
        
        PID:3292
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 3292
        250⤵
        
        PID:3380
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        251⤵
        
        PID:3084
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 3084
        252⤵
        
        PID:5492
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        253⤵
        
        PID:4948
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4948
        254⤵
        
        PID:4088
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        255⤵
        
        PID:6060
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 6060
        256⤵
        
        PID:1524
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        257⤵
        
        PID:3548
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 3548
        258⤵
        
        PID:1320
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        259⤵
        
        PID:620
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 620
        260⤵
        
        PID:4656
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        261⤵
        
        PID:5688
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 5688
        262⤵
        
        PID:5984
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        263⤵
        
        PID:3076
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 3076
        264⤵
        
        PID:1188
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        265⤵
        
        PID:4684
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4684
        266⤵
        
        PID:2936
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        267⤵
        
        PID:2584
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 2584
        268⤵
        
        PID:4728
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        269⤵
        
        PID:5412
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 5412
        270⤵
        
        PID:4296
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        271⤵
        
        PID:4344
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4344
        272⤵
        
        PID:4692
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        273⤵
        
        PID:2040
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 2040
        274⤵
        
        PID:2084
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        275⤵
        
        PID:5092
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 5092
        276⤵
        
        PID:1760
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        277⤵
        
        PID:3224
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 3224
        278⤵
        
        PID:3276
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        279⤵
        
        PID:4284
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4284
        280⤵
        
        PID:3016
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        281⤵
        
        PID:6064
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 6064
        282⤵
        
        PID:4348
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        283⤵
        
        PID:5336
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 5336
        284⤵
        
        PID:2580
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        285⤵
        
        PID:1480
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 1480
        286⤵
        
        PID:2244
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        287⤵
        
        PID:5668
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 5668
        288⤵
        
        PID:3284
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        289⤵
        
        PID:2900
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 2900
        290⤵
        
        PID:628
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        291⤵
        
        PID:1444
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 1444
        292⤵
        
        PID:2256
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        293⤵
        
        PID:6068
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 6068
        294⤵
        
        PID:5724
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        295⤵
        
        PID:1088
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 1088
        296⤵
        
        PID:3060
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        297⤵
        
        PID:2892
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 2892
        298⤵
        
        PID:5868
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        299⤵
        
        PID:240
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 240
        300⤵
        
        PID:5432
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        301⤵
        
        PID:4632
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4632
        302⤵
        
        PID:4788
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        303⤵
        
        PID:3340
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 3340
        304⤵
        
        PID:1764
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        305⤵
        
        PID:1656
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 1656
        306⤵
        
        PID:1872
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        307⤵
        
        PID:1260
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 1260
        308⤵
        
        PID:4984
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        309⤵
        
        PID:460
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 460
        310⤵
        
        PID:1532
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        311⤵
        
        PID:4768
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4768
        312⤵
        
        PID:2692
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        313⤵
        
        PID:5760
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 5760
        314⤵
        
        PID:2368
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        315⤵
        
        PID:2508
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 2508
        316⤵
        
        PID:5920
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        317⤵
        
        PID:3048
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 3048
        318⤵
        
        PID:5756
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        319⤵
        
        PID:3488
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 3488
        320⤵
        
        PID:2308
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        321⤵
        
        PID:2016
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 2016
        322⤵
        
        PID:3192
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        323⤵
        
        PID:5520
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 5520
        324⤵
        
        PID:4280
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        325⤵
        
        PID:4384
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4384
        326⤵
        
        PID:2948
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        327⤵
        
        PID:2484
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 2484
        328⤵
        
        PID:2724
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        329⤵
        
        PID:3348
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 3348
        330⤵
        
        PID:1136
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        331⤵
        
        PID:296
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 296
        332⤵
        
        PID:5344
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        333⤵
        
        PID:2572
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 2572
        334⤵
        
        PID:3544
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        335⤵
        
        PID:4140
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4140
        336⤵
        
        PID:1080
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        337⤵
        
        PID:5368
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 5368
        338⤵
        
        PID:4136
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        339⤵
        
        PID:1112
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 1112
        340⤵
        
        PID:5496
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        341⤵
        
        PID:3908
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 3908
        342⤵
        
        PID:4516
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        343⤵
        
        PID:6100
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 6100
        344⤵
        
        PID:2208
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        345⤵
        
        PID:3040
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 3040
        346⤵
        
        PID:256
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        347⤵
        
        PID:1732
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 1732
        348⤵
        
        PID:2896
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        349⤵
        
        PID:1740
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 1740
        350⤵
        
        PID:3884
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        351⤵
        
        PID:616
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 616
        352⤵
        
        PID:3444
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        353⤵
        
        PID:1100
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 1100
        354⤵
        
        PID:1848
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        355⤵
        
        PID:4124
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4124
        356⤵
        
        PID:4524
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        357⤵
        
        PID:3840
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 3840
        358⤵
        
        PID:4200
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        359⤵
        
        PID:5640
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 5640
        360⤵
        
        PID:4324
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        361⤵
        
        PID:2696
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 2696
        362⤵
        
        PID:5180
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        363⤵
        
        PID:3692
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 3692
        364⤵
        
        PID:120
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        365⤵
        
        PID:4160
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4160
        366⤵
        
        PID:5064
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        367⤵
        
        PID:3320
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 3320
        368⤵
        
        PID:2492
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        369⤵
        
        PID:1180
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 1180
        370⤵
        
        PID:5716
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        371⤵
        
        PID:2712
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 2712
        372⤵
        
        PID:264
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        373⤵
        
        PID:5012
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 5012
        374⤵
        
        PID:4712
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        375⤵
        
        PID:3900
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 3900
        376⤵
        
        PID:2788
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        377⤵
        
        PID:4152
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe" -g 4152
        378⤵
        
        PID:5792
        
        C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe
        
        "C:\Users\Admin\AppData\Local\Temp\2026-08-02_21bdb1c9e870c5baca34f50a86a3fadc_cobalt-strike_glassworm_icedid_satacom.exe"
        379⤵
        
        PID:4892

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4772-0-0x000002432ED20000-0x000002432ED69000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads