Analysis
- max time kernel
34s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
03/08/2026, 18:19
Behavioral task
behavioral1
Sample
2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
General
- Target 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.exe
- Size 1.2MB
- Sample260803-wyeessdf75
- SHA256 e9d06cc494954612c6312033d68867c55b449c635cff80d54b895941cc1e58e9
- MD5 46955b202880dcee211037a434c3233d
- SHA1 3968f6223a1349cc4f509eef010b352ee840a8f1
- SHA512 13e89b20275e91ca846b30629e10623947769e05f9ee59780a29f19db466be2330f7589030e9b8cba8917045238132d760a395c8c6299eef5dfb38cb81802d02
- SSDEEP 12288:7YixUrHGQVL9vwf+SqwLa8Cck34T8YixUrHGQVL9vwf+SqwLa8Cck34T4:Xxal9vGhqF34TYxal9vGhqF34T4
- TLSH T1FE456A57F65910BCD4AAC178835A6537BA72B84907317EEB1780AB313E76BE06B3D700
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Detects Shodi worm 2 IoCs
resource yara_rule behavioral2/files/0x0013000000016db3-4.dat family_shodi behavioral2/files/0x000f00000001c4d0-68.dat family_shodi - Executes dropped EXE 64 IoCs
pid Process 5040 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 6000 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 3156 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 3356 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 3316 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 4956 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 3148 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 5700 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 4144 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 2928 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 444 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 944 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 4976 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 924 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 4104 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 4408 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 1028 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 5060 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 4936 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 1892 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 3744 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 704 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 3340 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 5980 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 4900 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 1384 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 3300 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 3488 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 4368 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 2884 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 4968 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 5476 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 1760 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 3816 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 2412 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 1972 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 404 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 268 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 248 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 3728 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 832 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 4620 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 2020 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 3860 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 5712 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 1648 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 2820 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 6048 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 5600 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 2516 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 5016 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 2404 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 3956 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 5812 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 988 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 4164 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 4928 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 3792 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 5988 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 2148 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 4704 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 4220 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 1440 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 5880 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa - Drops file in System32 directory 2 IoCs
description ioc Process File created C:\Windows\SysWOW64\UsaShohdi.asu 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.exe File opened for modification C:\Windows\SysWOW64\UsaShohdi.asu 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.exe - Drops file in Program Files directory 9 IoCs
description ioc Process File created \??\c:\Program Files\7-Zip\Uninstall.exe 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.exe File created \??\c:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.exe File opened for modification \??\c:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.usa 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.exe File created \??\c:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.exe File created \??\c:\Program Files\7-Zip\7zFM.exe 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.exe File opened for modification \??\c:\Program Files\7-Zip\Uninstall.usa 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.exe File opened for modification \??\c:\Program Files\7-Zip\7zFM.usa 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.exe File created \??\c:\Program Files\7-Zip\7zG.exe 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.exe File opened for modification \??\c:\Program Files\7-Zip\7zG.usa 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.exe - System Location Discovery: System Language Discovery 1 TTPs 64 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found - Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 3448 wrote to memory of 5040 3448 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.exe 89 PID 5040 wrote to memory of 6000 5040 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 90 PID 6000 wrote to memory of 3156 6000 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 91 PID 3156 wrote to memory of 3356 3156 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 92 PID 3356 wrote to memory of 3316 3356 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 93 PID 3316 wrote to memory of 4956 3316 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 94 PID 4956 wrote to memory of 3148 4956 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 95 PID 3148 wrote to memory of 5700 3148 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 96 PID 5700 wrote to memory of 4144 5700 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 97 PID 4144 wrote to memory of 2928 4144 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 98 PID 2928 wrote to memory of 444 2928 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 99 PID 444 wrote to memory of 944 444 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 100 PID 944 wrote to memory of 4976 944 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 101 PID 4976 wrote to memory of 924 4976 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 102 PID 924 wrote to memory of 4104 924 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 103 PID 4104 wrote to memory of 4408 4104 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 104 PID 4408 wrote to memory of 1028 4408 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 105 PID 1028 wrote to memory of 5060 1028 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 106 PID 5060 wrote to memory of 4936 5060 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 107 PID 4936 wrote to memory of 1892 4936 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 108 PID 1892 wrote to memory of 3744 1892 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 109 PID 3744 wrote to memory of 704 3744 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 110 PID 704 wrote to memory of 3340 704 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 111 PID 3340 wrote to memory of 5980 3340 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 112 PID 5980 wrote to memory of 4900 5980 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 113 PID 4900 wrote to memory of 1384 4900 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 114 PID 1384 wrote to memory of 3300 1384 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 115 PID 3300 wrote to memory of 3488 3300 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 116 PID 3488 wrote to memory of 4368 3488 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 117 PID 4368 wrote to memory of 2884 4368 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 118 PID 2884 wrote to memory of 4968 2884 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 119 PID 4968 wrote to memory of 5476 4968 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 120 PID 5476 wrote to memory of 1760 5476 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 121 PID 1760 wrote to memory of 3816 1760 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 122 PID 3816 wrote to memory of 2412 3816 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 123 PID 2412 wrote to memory of 1972 2412 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 124 PID 1972 wrote to memory of 404 1972 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 125 PID 404 wrote to memory of 268 404 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 126 PID 268 wrote to memory of 248 268 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 127 PID 248 wrote to memory of 3728 248 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 128 PID 3728 wrote to memory of 832 3728 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 129 PID 832 wrote to memory of 4620 832 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 130 PID 4620 wrote to memory of 2020 4620 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 131 PID 2020 wrote to memory of 3860 2020 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 132 PID 3860 wrote to memory of 5712 3860 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 133 PID 5712 wrote to memory of 1648 5712 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 134 PID 1648 wrote to memory of 2820 1648 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 135 PID 2820 wrote to memory of 6048 2820 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 136 PID 6048 wrote to memory of 5600 6048 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 137 PID 5600 wrote to memory of 2516 5600 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 138 PID 2516 wrote to memory of 5016 2516 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 139 PID 5016 wrote to memory of 2404 5016 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 140 PID 2404 wrote to memory of 3956 2404 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 141 PID 3956 wrote to memory of 5812 3956 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 142 PID 5812 wrote to memory of 988 5812 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 143 PID 988 wrote to memory of 4164 988 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 144 PID 4164 wrote to memory of 4928 4164 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 145 PID 4928 wrote to memory of 3792 4928 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 146 PID 3792 wrote to memory of 5988 3792 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 147 PID 5988 wrote to memory of 2148 5988 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 148 PID 2148 wrote to memory of 4704 2148 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 149 PID 4704 wrote to memory of 4220 4704 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 150 PID 4220 wrote to memory of 1440 4220 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 151 PID 1440 wrote to memory of 5880 1440 2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa 152
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.exe"1⤵
- Drops file in System32 directory
- Drops file in Program Files directory
- Suspicious use of WriteProcessMemory
PID:3448 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa2⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:5040 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa3⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:6000 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa4⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:3156 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa5⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:3356 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa6⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:3316 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa7⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4956 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa8⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:3148 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa9⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:5700 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa10⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4144 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa11⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:2928 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa12⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:444 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa13⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:944 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa14⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4976 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa15⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:924 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa16⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4104 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa17⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4408 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa18⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:1028 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa19⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:5060 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa20⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4936 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa21⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:1892 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa22⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:3744 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa23⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:704 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa24⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:3340 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa25⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:5980 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa26⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4900 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa27⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:1384 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa28⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:3300 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa29⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:3488 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa30⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4368 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa31⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:2884 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa32⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4968 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa33⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:5476 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa34⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:1760 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa35⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:3816 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa36⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:2412 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa37⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:1972 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa38⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:404 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa39⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:268 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa40⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:248 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa41⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:3728 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa42⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:832 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa43⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4620 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa44⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:2020 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa45⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:3860 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa46⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:5712 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa47⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:1648 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa48⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:2820 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa49⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:6048 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa50⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:5600 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa51⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:2516 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa52⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:5016 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa53⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:2404 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa54⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:3956 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa55⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:5812 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa56⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:988 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa57⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4164 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa58⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4928 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa59⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:3792 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa60⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:5988 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa61⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:2148 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa62⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4704 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa63⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4220 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa64⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:1440 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa65⤵
- Executes dropped EXE
PID:5880 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa66⤵PID:1288
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa67⤵PID:5036
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa68⤵PID:5436
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa69⤵PID:5728
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa70⤵PID:3652
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa71⤵PID:880
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa72⤵PID:5632
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa73⤵
- System Location Discovery: System Language Discovery
PID:4844 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa74⤵PID:1212
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa75⤵PID:1664
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa76⤵PID:3252
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa77⤵PID:3224
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa78⤵PID:1588
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa79⤵PID:2392
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa80⤵PID:4944
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa81⤵PID:2616
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa82⤵PID:4200
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa83⤵PID:2572
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa84⤵
- System Location Discovery: System Language Discovery
PID:1424 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa85⤵PID:2184
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa86⤵PID:1224
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa87⤵
- System Location Discovery: System Language Discovery
PID:3560 -
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa88⤵PID:1872
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa89⤵PID:992
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa90⤵PID:2576
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa91⤵PID:2596
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa92⤵PID:2840
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa93⤵PID:3980
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa94⤵PID:5380
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa95⤵PID:2608
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa96⤵PID:3372
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa97⤵PID:2944
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa98⤵PID:4708
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa99⤵PID:5532
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa100⤵PID:4228
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa101⤵PID:2604
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa102⤵PID:5452
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa103⤵PID:2192
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa104⤵PID:4516
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa105⤵PID:6088
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa106⤵PID:4624
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa107⤵PID:2220
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa108⤵PID:4676
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa109⤵PID:2868
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa110⤵PID:4488
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa111⤵PID:3048
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa112⤵PID:1552
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa113⤵PID:2440
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa114⤵PID:5304
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa115⤵PID:1948
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa116⤵PID:2856
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa117⤵PID:1052
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa118⤵PID:2452
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa119⤵PID:4112
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa120⤵PID:1600
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa121⤵PID:1652
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-03_46955b202880dcee211037a434c3233d_akira_elex_rhadamanthys.usa122⤵PID:5008
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-