Overview

overview

8

Static

static

3

beetle-cab/7za.dll

windows10-2004-x64

3

beetle-cab/7za.dll

windows11-ltsc_2024-x64

3

beetle-cab/7za.exe

windows10-2004-x64

3

beetle-cab/7za.exe

windows11-ltsc_2024-x64

3

beetle-cab/7zxa.dll

windows10-2004-x64

3

beetle-cab/7zxa.dll

windows11-ltsc_2024-x64

3

beetle-cab/start.cmd

windows10-2004-x64

8

beetle-cab/start.cmd

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    118s
  • max time network
    149s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    04/08/2026, 12:16

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    beetle-cab/start.cmd
  • Size 86B
  • Sample260804-pfhk6swvbw
  • SHA256 030ee398e53caf0928e757162f3c7be7d593a59dde2795991ec7e4fd8e71f2e3
  • MD5 SHA1 SHA512 TLSH
Score
8/10
defense_evasiondiscoveryexecutionpersistenceprivilege_escalationupx

Malware Config

Signatures

  • Badlisted process makes network request 64 IoCs

    Network request originating from process or tool commonly abused by malware.

  • Modifies Windows Firewall 2 TTPs 2 IoCs
    defense_evasion
  • Executes dropped EXE 52 IoCs
  • UPX packed file 64 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Event Triggered Execution: Netsh Helper DLL 1 TTPs 6 IoCs

    Netsh.exe (also referred to as Netshell) is a command-line scripting utility used to interact with the network configuration of a system.

    persistenceprivilege_escalation
  • Executes a command shell one-liner 1 TTPs 59 IoCs

    Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

    execution
  • System Location Discovery: System Language Discovery 1 TTPs 64 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 64 IoCs

    Adversaries may check for Internet connectivity on compromised systems.

    discovery
  • Modifies registry class 3 IoCs
  • Script User-Agent 1 IoCs

    Uses user-agent string associated with script host/environment.

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\beetle-cab\start.cmd"
    1⤵
    • Executes a command shell one-liner
    • Modifies registry class
    • Suspicious use of WriteProcessMemory
    PID:5776
    • C:\Users\Admin\AppData\Local\Temp\beetle-cab\7za.exe
      7za.exe x -y -aoa -pbeetle arc.7z -oext
      2⤵
      • System Location Discovery: System Language Discovery
      • Suspicious use of AdjustPrivilegeToken
      PID:3960
    • C:\Windows\SysWOW64\mshta.exe
      "C:\Windows\SysWOW64\mshta.exe" "C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\run.hta" {1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}{1E460BD7-F1C3-4B2E-88BF-4E770A288AF5} --sfx
      2⤵
      • Badlisted process makes network request
      • Modifies registry class
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:5944
      • C:\Windows\SysWOW64\rundll32.exe
        rundll32 kernel32,Sleep
        3⤵
        • System Location Discovery: System Language Discovery
        PID:5844
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c "netsh advfirewall firewall delete rule name="DriverPack aria2c.exe" || echo Done & call echo Done %^errorLevel% > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\run_command_47834.txt""
        3⤵
        • Executes a command shell one-liner
        • Suspicious use of WriteProcessMemory
        PID:1880
        • C:\Windows\SysWOW64\netsh.exe
          netsh advfirewall firewall delete rule name="DriverPack aria2c.exe"
          4⤵
          • Modifies Windows Firewall
          • Event Triggered Execution: Netsh Helper DLL
          • System Location Discovery: System Language Discovery
          PID:2124
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c "netsh advfirewall firewall add rule name="DriverPack aria2c.exe" dir=in action=allow program="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\tools\aria2c.exe" || echo Done & call echo Done %^errorLevel% > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\run_command_3749.txt""
        3⤵
        • Executes a command shell one-liner
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:5624
        • C:\Windows\SysWOW64\netsh.exe
          netsh advfirewall firewall add rule name="DriverPack aria2c.exe" dir=in action=allow program="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\tools\aria2c.exe"
          4⤵
          • Modifies Windows Firewall
          • Event Triggered Execution: Netsh Helper DLL
          • System Location Discovery: System Language Discovery
          PID:2624
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/intro.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_74825.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_74825.txt""
        3⤵
        • Executes a command shell one-liner
        • System Location Discovery: System Language Discovery
        • System Network Configuration Discovery: Internet Connection Discovery
        • Suspicious use of WriteProcessMemory
        PID:5816
        • C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/intro.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_74825.log"
          4⤵
          • Executes dropped EXE
          • System Network Configuration Discovery: Internet Connection Discovery
          PID:2412
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/START-INITIAL-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_48173.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_48173.txt""
        3⤵
        • Executes a command shell one-liner
        • System Location Discovery: System Language Discovery
        • System Network Configuration Discovery: Internet Connection Discovery
        • Suspicious use of WriteProcessMemory
        PID:3012
        • C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/START-INITIAL-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_48173.log"
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          PID:5856
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/START-LOADED-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_8742.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_8742.txt""
        3⤵
        • Executes a command shell one-liner
        • Suspicious use of WriteProcessMemory
        PID:1212
        • C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/START-LOADED-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_8742.log"
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          PID:2740
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/START-SETUP-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_40862.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_40862.txt""
        3⤵
        • Executes a command shell one-liner
        • Suspicious use of WriteProcessMemory
        PID:5060
        • C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/START-SETUP-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_40862.log"
          4⤵
          • Executes dropped EXE
          • System Network Configuration Discovery: Internet Connection Discovery
          PID:1696
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/EXPERT-DRIVERS-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_90003.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_90003.txt""
        3⤵
        • Executes a command shell one-liner
        • System Network Configuration Discovery: Internet Connection Discovery
        • Suspicious use of WriteProcessMemory
        PID:5148
        • C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/EXPERT-DRIVERS-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_90003.log"
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          • System Network Configuration Discovery: Internet Connection Discovery
          PID:4652
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/EXPERT-DRIVERS-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_60602.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_60602.txt""
        3⤵
        • Executes a command shell one-liner
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:4596
        • C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/EXPERT-DRIVERS-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_60602.log"
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          PID:5960
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/EXPERT-DRIVERS-3.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_57552.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_57552.txt""
        3⤵
        • Executes a command shell one-liner
        • System Location Discovery: System Language Discovery
        • System Network Configuration Discovery: Internet Connection Discovery
        • Suspicious use of WriteProcessMemory
        PID:5232
        • C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/EXPERT-DRIVERS-3.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_57552.log"
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          PID:768
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/TEAM-PROOF-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_16750.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_16750.txt""
        3⤵
        • Executes a command shell one-liner
        • System Network Configuration Discovery: Internet Connection Discovery
        • Suspicious use of WriteProcessMemory
        PID:3984
        • C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/TEAM-PROOF-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_16750.log"
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          PID:1812
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/TEAM-PROOF-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_32839.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_32839.txt""
        3⤵
        • Executes a command shell one-liner
        • System Location Discovery: System Language Discovery
        • System Network Configuration Discovery: Internet Connection Discovery
        • Suspicious use of WriteProcessMemory
        PID:4008
        • C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/TEAM-PROOF-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_32839.log"
          4⤵
          • Executes dropped EXE
          • System Network Configuration Discovery: Internet Connection Discovery
          PID:5708
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/TEAM-PROOF-3.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_57327.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_57327.txt""
        3⤵
        • Executes a command shell one-liner
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:3268
        • C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/TEAM-PROOF-3.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_57327.log"
          4⤵
          • Executes dropped EXE
          PID:5368
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/CONTINUOUS-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_55508.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_55508.txt""
        3⤵
        • Executes a command shell one-liner
        • System Location Discovery: System Language Discovery
        • System Network Configuration Discovery: Internet Connection Discovery
        • Suspicious use of WriteProcessMemory
        PID:5204
        • C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/CONTINUOUS-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_55508.log"
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          • System Network Configuration Discovery: Internet Connection Discovery
          PID:1484
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/CONTINUOUS-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_77000.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_77000.txt""
        3⤵
        • Executes a command shell one-liner
        • Suspicious use of WriteProcessMemory
        PID:3248
        • C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/CONTINUOUS-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_77000.log"
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          • System Network Configuration Discovery: Internet Connection Discovery
          PID:4204
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/ANTIVIRUS-3.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_94116.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_94116.txt""
        3⤵
        • Executes a command shell one-liner
        • System Network Configuration Discovery: Internet Connection Discovery
        • Suspicious use of WriteProcessMemory
        PID:2828
        • C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/ANTIVIRUS-3.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_94116.log"
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          PID:4208
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/ANTIVIRUS-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_53942.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_53942.txt""
        3⤵
        • Executes a command shell one-liner
        • System Network Configuration Discovery: Internet Connection Discovery
        • Suspicious use of WriteProcessMemory
        PID:2768
        • C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/ANTIVIRUS-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_53942.log"
          4⤵
          • Executes dropped EXE
          • System Network Configuration Discovery: Internet Connection Discovery
          PID:5364
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/ANTIVIRUS-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_46021.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_46021.txt""
        3⤵
        • Executes a command shell one-liner
        • System Location Discovery: System Language Discovery
        • System Network Configuration Discovery: Internet Connection Discovery
        • Suspicious use of WriteProcessMemory
        PID:3148
        • C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/ANTIVIRUS-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_46021.log"
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          • System Network Configuration Discovery: Internet Connection Discovery
          PID:5260
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/CONTINUOUS-3.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_35271.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_35271.txt""
        3⤵
        • Executes a command shell one-liner
        • System Network Configuration Discovery: Internet Connection Discovery
        • Suspicious use of WriteProcessMemory
        PID:2548
        • C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/CONTINUOUS-3.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_35271.log"
          4⤵
          • Executes dropped EXE
          • System Network Configuration Discovery: Internet Connection Discovery
          PID:764
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/EXPERT-DRIVERS-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_59142.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_59142.txt""
        3⤵
        • Executes a command shell one-liner
        • Suspicious use of WriteProcessMemory
        PID:2740
        • C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/EXPERT-DRIVERS-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_59142.log"
          4⤵
          • Executes dropped EXE
          • System Network Configuration Discovery: Internet Connection Discovery
          PID:5008
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/EXPERT-DRIVERS-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_95410.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_95410.txt""
        3⤵
        • Executes a command shell one-liner
        • System Network Configuration Discovery: Internet Connection Discovery
        • Suspicious use of WriteProcessMemory
        PID:4036
        • C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/EXPERT-DRIVERS-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_95410.log"
          4⤵
          • Executes dropped EXE
          • System Network Configuration Discovery: Internet Connection Discovery
          PID:3940
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/EXPERT-DRIVERS-3.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_478.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_478.txt""
        3⤵
        • Executes a command shell one-liner
        • Suspicious use of WriteProcessMemory
        PID:2120
        • C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/EXPERT-DRIVERS-3.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_478.log"
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          • System Network Configuration Discovery: Internet Connection Discovery
          PID:4720
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/EXPERT-PROGRAMS_CHECKBOX_USED-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_16499.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_16499.txt""
        3⤵
        • Executes a command shell one-liner
        • System Location Discovery: System Language Discovery
        • System Network Configuration Discovery: Internet Connection Discovery
        • Suspicious use of WriteProcessMemory
        PID:2476
        • C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/EXPERT-PROGRAMS_CHECKBOX_USED-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_16499.log"
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          • System Network Configuration Discovery: Internet Connection Discovery
          PID:3840
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/EXPERT-PROGRAMS_CHECKBOX_USED-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_27408.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_27408.txt""
        3⤵
        • Executes a command shell one-liner
        • System Location Discovery: System Language Discovery
        • System Network Configuration Discovery: Internet Connection Discovery
        • Suspicious use of WriteProcessMemory
        PID:1236
        • C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/EXPERT-PROGRAMS_CHECKBOX_USED-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_27408.log"
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          • System Network Configuration Discovery: Internet Connection Discovery
          PID:5524
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/EXPERT-PROTECT-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_78993.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_78993.txt""
        3⤵
        • Executes a command shell one-liner
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:2992
        • C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/EXPERT-PROTECT-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_78993.log"
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          PID:5912
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/EXPERT-PROTECT-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_10545.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_10545.txt""
        3⤵
        • Executes a command shell one-liner
        • Suspicious use of WriteProcessMemory
        PID:2940
        • C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/EXPERT-PROTECT-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_10545.log"
          4⤵
          • Executes dropped EXE
          • System Network Configuration Discovery: Internet Connection Discovery
          PID:5564
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/EXPERT-PROTECT-3.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_21288.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_21288.txt""
        3⤵
        • Executes a command shell one-liner
        • System Location Discovery: System Language Discovery
        • System Network Configuration Discovery: Internet Connection Discovery
        • Suspicious use of WriteProcessMemory
        PID:5332
        • C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/EXPERT-PROTECT-3.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_21288.log"
          4⤵
          • Executes dropped EXE
          • System Network Configuration Discovery: Internet Connection Discovery
          PID:1416
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/EXPERT-DIAGNOSTICS-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_53310.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_53310.txt""
        3⤵
        • Executes a command shell one-liner
        • System Location Discovery: System Language Discovery
        • System Network Configuration Discovery: Internet Connection Discovery
        • Suspicious use of WriteProcessMemory
        PID:2728
        • C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/EXPERT-DIAGNOSTICS-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_53310.log"
          4⤵
          • Executes dropped EXE
          • System Network Configuration Discovery: Internet Connection Discovery
          PID:4704
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/EXPERT-DIAGNOSTICS-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_78493.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_78493.txt""
        3⤵
        • Executes a command shell one-liner
        • System Network Configuration Discovery: Internet Connection Discovery
        • Suspicious use of WriteProcessMemory
        PID:4688
        • C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/EXPERT-DIAGNOSTICS-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_78493.log"
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          • System Network Configuration Discovery: Internet Connection Discovery
          PID:5692
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/EXPERT-DIAGNOSTICS-3.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_40565.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_40565.txt""
        3⤵
        • Executes a command shell one-liner
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:2864
        • C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/EXPERT-DIAGNOSTICS-3.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_40565.log"
          4⤵
          • Executes dropped EXE
          PID:4732
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/EXPERT-DIAGNOSTICS-4.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_49100.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_49100.txt""
        3⤵
        • Executes a command shell one-liner
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:3832
        • C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/EXPERT-DIAGNOSTICS-4.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_49100.log"
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          • System Network Configuration Discovery: Internet Connection Discovery
          PID:3812
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/EXPERT-DIAGNOSTICS-5.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_84168.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_84168.txt""
        3⤵
        • Executes a command shell one-liner
        • System Location Discovery: System Language Discovery
        • System Network Configuration Discovery: Internet Connection Discovery
        PID:2204
        • C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/EXPERT-DIAGNOSTICS-5.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_84168.log"
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          PID:1348
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/EXPERT-DIAGNOSTICS-6.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_53819.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_53819.txt""
        3⤵
        • Executes a command shell one-liner
        • System Location Discovery: System Language Discovery
        PID:3520
        • C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/EXPERT-DIAGNOSTICS-6.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_53819.log"
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          • System Network Configuration Discovery: Internet Connection Discovery
          PID:936
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/EXPERT-CONFIGURATOR-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_69933.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_69933.txt""
        3⤵
        • Executes a command shell one-liner
        • System Network Configuration Discovery: Internet Connection Discovery
        PID:4940
        • C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/EXPERT-CONFIGURATOR-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_69933.log"
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          • System Network Configuration Discovery: Internet Connection Discovery
          PID:5956
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/EXPERT-CONFIGURATOR-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_40584.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_40584.txt""
        3⤵
        • Executes a command shell one-liner
        • System Location Discovery: System Language Discovery
        • System Network Configuration Discovery: Internet Connection Discovery
        PID:5548
        • C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/EXPERT-CONFIGURATOR-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_40584.log"
          4⤵
          • Executes dropped EXE
          • System Network Configuration Discovery: Internet Connection Discovery
          PID:3272
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/EXPERT-CONFIGURATOR-3.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_21477.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_21477.txt""
        3⤵
        • Executes a command shell one-liner
        PID:4520
        • C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/EXPERT-CONFIGURATOR-3.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_21477.log"
          4⤵
          • Executes dropped EXE
          PID:3896
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/EXPERT-SETTINGS-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_83957.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_83957.txt""
        3⤵
        • Executes a command shell one-liner
        • System Network Configuration Discovery: Internet Connection Discovery
        PID:2128
        • C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/EXPERT-SETTINGS-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_83957.log"
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          • System Network Configuration Discovery: Internet Connection Discovery
          PID:5524
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/TEAM-PROOF-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_98.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_98.txt""
        3⤵
        • Executes a command shell one-liner
        • System Network Configuration Discovery: Internet Connection Discovery
        PID:2716
        • C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/TEAM-PROOF-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_98.log"
          4⤵
          • Executes dropped EXE
          PID:3780
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/TEAM-PROOF-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_13709.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_13709.txt""
        3⤵
        • Executes a command shell one-liner
        • System Location Discovery: System Language Discovery
        • System Network Configuration Discovery: Internet Connection Discovery
        PID:5528
        • C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/TEAM-PROOF-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_13709.log"
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          • System Network Configuration Discovery: Internet Connection Discovery
          PID:4448
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/TEAM-PROOF-3.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_45112.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_45112.txt""
        3⤵
        • Executes a command shell one-liner
        • System Location Discovery: System Language Discovery
        PID:4684
        • C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/TEAM-PROOF-3.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_45112.log"
          4⤵
          • Executes dropped EXE
          • System Network Configuration Discovery: Internet Connection Discovery
          PID:5872
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/CONTINUOUS-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_57220.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_57220.txt""
        3⤵
        • Executes a command shell one-liner
        PID:4056
        • C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/CONTINUOUS-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_57220.log"
          4⤵
          • Executes dropped EXE
          PID:6048
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/CONTINUOUS-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_9875.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_9875.txt""
        3⤵
        • Executes a command shell one-liner
        • System Network Configuration Discovery: Internet Connection Discovery
        PID:1516
        • C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/CONTINUOUS-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_9875.log"
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          PID:1544
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/CONTINUOUS-3.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_71943.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_71943.txt""
        3⤵
        • Executes a command shell one-liner
        • System Location Discovery: System Language Discovery
        • System Network Configuration Discovery: Internet Connection Discovery
        PID:4152
        • C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/CONTINUOUS-3.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_71943.log"
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          • System Network Configuration Discovery: Internet Connection Discovery
          PID:1180
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/ANTIVIRUS-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_69582.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_69582.txt""
        3⤵
        • Executes a command shell one-liner
        • System Location Discovery: System Language Discovery
        PID:4936
        • C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/ANTIVIRUS-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_69582.log"
          4⤵
          • Executes dropped EXE
          • System Network Configuration Discovery: Internet Connection Discovery
          PID:5028
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/ANTIVIRUS-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_89077.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_89077.txt""
        3⤵
        • Executes a command shell one-liner
        • System Location Discovery: System Language Discovery
        PID:4672
        • C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/ANTIVIRUS-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_89077.log"
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          • System Network Configuration Discovery: Internet Connection Discovery
          PID:5620
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/ANTIVIRUS-3.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_17491.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_17491.txt""
        3⤵
        • Executes a command shell one-liner
        PID:616
        • C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/ANTIVIRUS-3.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_17491.log"
          4⤵
          • Executes dropped EXE
          • System Network Configuration Discovery: Internet Connection Discovery
          PID:3924
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/COMPILATION-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_57001.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_57001.txt""
        3⤵
        • Executes a command shell one-liner
        • System Network Configuration Discovery: Internet Connection Discovery
        PID:4028
        • C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/COMPILATION-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_57001.log"
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          PID:1144
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/COMPILATION-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_46468.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_46468.txt""
        3⤵
        • Executes a command shell one-liner
        • System Network Configuration Discovery: Internet Connection Discovery
        PID:4292
        • C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/COMPILATION-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_46468.log"
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          • System Network Configuration Discovery: Internet Connection Discovery
          PID:4516
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/COMPILATION-3.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_14918.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_14918.txt""
        3⤵
        • Executes a command shell one-liner
        • System Network Configuration Discovery: Internet Connection Discovery
        PID:4052
        • C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/COMPILATION-3.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_14918.log"
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          • System Network Configuration Discovery: Internet Connection Discovery
          PID:2104
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/SERVICE_MODE-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_48119.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_48119.txt""
        3⤵
        • Executes a command shell one-liner
        • System Location Discovery: System Language Discovery
        • System Network Configuration Discovery: Internet Connection Discovery
        PID:748
        • C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/SERVICE_MODE-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_48119.log"
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          PID:1216
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/SERVICE_MODE-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_3505.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_3505.txt""
        3⤵
        • Executes a command shell one-liner
        • System Location Discovery: System Language Discovery
        PID:4204
        • C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/SERVICE_MODE-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_3505.log"
          4⤵
          • Executes dropped EXE
          • System Network Configuration Discovery: Internet Connection Discovery
          PID:5784
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/ISTART_1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_87815.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_87815.txt""
        3⤵
        • Executes a command shell one-liner
        • System Location Discovery: System Language Discovery
        • System Network Configuration Discovery: Internet Connection Discovery
        PID:3752
        • C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/ISTART_1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_87815.log"
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          PID:4968
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/ISTART_2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_22790.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_22790.txt""
        3⤵
        • Executes a command shell one-liner
        • System Location Discovery: System Language Discovery
        PID:5024
        • C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/ISTART_2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_22790.log"
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          PID:1724
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/ISTART_3.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_11582.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_11582.txt""
        3⤵
        • Executes a command shell one-liner
        PID:2988
        • C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/ISTART_3.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_11582.log"
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          PID:1416
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/ISTART_4.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_28425.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_28425.txt""
        3⤵
        • Executes a command shell one-liner
        PID:2636
        • C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/ISTART_4.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_28425.log"
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          PID:3816
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/WAITING-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_44925.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_44925.txt""
        3⤵
        • Executes a command shell one-liner
        PID:4624
        • C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/WAITING-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_44925.log"
          4⤵
          • System Network Configuration Discovery: Internet Connection Discovery
          PID:2996
      • C:\Windows\SysWOW64\cmd.exe
        "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/WAITING-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_6285.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_6285.txt""
        3⤵
        • Executes a command shell one-liner
        • System Network Configuration Discovery: Internet Connection Discovery
        PID:5596
        • C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\tools\driverpack-wget.exe
          "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/WAITING-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_6285.log"
          4⤵
            PID:5588
        • C:\Windows\SysWOW64\cmd.exe
          "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/DRIVERS-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_14456.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_14456.txt""
          3⤵
          • Executes a command shell one-liner
          PID:5984
          • C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\tools\driverpack-wget.exe
            "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/DRIVERS-1.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_14456.log"
            4⤵
              PID:200
          • C:\Windows\SysWOW64\cmd.exe
            "C:\Windows\System32\cmd.exe" /c ""tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/DRIVERS-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_11136.log" & echo DONE > "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_11136.txt""
            3⤵
            • Executes a command shell one-liner
            PID:5520
            • C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\tools\driverpack-wget.exe
              "tools\driverpack-wget.exe" --tries=3 --timeout 5 --retry-connrefused --wait=5 --timestamping --directory-prefix="C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en" "http://dl.driverpack.io/assistant/beetle/audio/en/DRIVERS-2.mp3" -o "C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_11136.log"
              4⤵
                PID:1708
            • C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\Tools\driverpack-7za.exe
              "C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\Tools\driverpack-7za.exe" a "C:\Users\Admin\AppData\Roaming\DRPSu\snapshots\DriverPack_Snapshot_20260804_131845.zip" "C:\Users\Admin\AppData\Roaming\DRPSu\diagnostics\*"
              3⤵
                PID:4864
          • C:\Windows\system32\svchost.exe
            C:\Windows\system32\svchost.exe -k GPSvcGroup
            1⤵
              PID:4528

            Network

                  MITRE ATT&CK Enterprise v16

                  Replay Monitor

                  Loading Replay Monitor...

                  Downloads

                  ANTIVIRUS-2[1].mp3
                  • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\A4AL14AO\ANTIVIRUS-2[1].mp3
                  • Size 23KB
                  • SHA256 c87feb5bd45ff4ffb897f53c22e3e2f5732ad49d124724248a06627162bc40ab
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  ANTIVIRUS-3[1].mp3
                  • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\A4AL14AO\ANTIVIRUS-3[1].mp3
                  • Size 21KB
                  • SHA256 1d23cba7b365efc03cf981a61ad2faf55a93740e077e1ab6569a2ec2c58191fd
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  CONTINUOUS-1[1].mp3
                  • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\A4AL14AO\CONTINUOUS-1[1].mp3
                  • Size 9KB
                  • SHA256 571aed8d5306ecfa709dc894f6fe66176bc99380ee42694328b3da237fd6b989
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  EXPERT-CONFIGURATOR-2[1].mp3
                  • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\A4AL14AO\EXPERT-CONFIGURATOR-2[1].mp3
                  • Size 30KB
                  • SHA256 5a3e6a91181f9c87c354447d4e8c06a49cebfd06b2bb76683f44bb6a3200ee86
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  collect[1].gif
                  • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\A4AL14AO\collect[1].gif
                  • Size 35B
                  • SHA256 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                  • MD5 SHA1 SHA512
                  Submit Download

                  sync_cookie_image_finish_secondary[1].gif
                  • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\A4AL14AO\sync_cookie_image_finish_secondary[1].gif
                  • Size 43B
                  • SHA256 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
                  • MD5 SHA1 SHA512
                  Submit Download

                  ANTIVIRUS-1[1].mp3
                  • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\BI86F88I\ANTIVIRUS-1[1].mp3
                  • Size 36KB
                  • SHA256 46d1565a9237f7ade1d03a2d70c084f5f688d6a0574220ecc5eb83d5cfd875ed
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  CONTINUOUS-3[1].mp3
                  • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\O2VORDIH\CONTINUOUS-3[1].mp3
                  • Size 26KB
                  • SHA256 88d420fb6a0a847c522066698efec070203c436aa5e2ff2097bb2e5e3692150b
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  EXPERT-CONFIGURATOR-1[1].mp3
                  • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\O2VORDIH\EXPERT-CONFIGURATOR-1[1].mp3
                  • Size 23KB
                  • SHA256 3aa947528d8e22c95fc3c2c189a223293746f65aa04a034ab7e51f07108b0e63
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  WAITING-2[1].dat
                  • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\O2VORDIH\WAITING-2[1].dat
                  • Size 192KB
                  • SHA256 4bebba087f04d890c8191a8810bf7cbf714c30d590e8861fed90116952414a22
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  EXPERT-CONFIGURATOR-3[1].mp3
                  • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\R7K7Z5DQ\EXPERT-CONFIGURATOR-3[1].mp3
                  • Size 21KB
                  • SHA256 78ae68bedd64b4cae4dadcf69c184b62c709756f9e2128bb178311431b4129ee
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  intro[1].mp3
                  • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\R7K7Z5DQ\intro[1].mp3
                  • Size 27KB
                  • SHA256 8fcbf2cede0ba798aabc145593b273d3c76596ca9bce0a3138684fa7b416359f
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  DriverPackSolution.html
                  • Path C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\DriverPackSolution.html
                  • Size 4KB
                  • SHA256 8892e63141854bcf4bb1452abef68dd2c348c59322d697ef11a7ab7c5e3c4aea
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  COMPILATION-1.mp3
                  • Path C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en\COMPILATION-1.mp3
                  • Size 17KB
                  • SHA256 ae70f1cc64550e94420d87adcaad724d1249982742c3bde5febad04eff28f988
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  COMPILATION-2.mp3
                  • Path C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en\COMPILATION-2.mp3
                  • Size 22KB
                  • SHA256 d25c6a14bf6694641f0237ddeb0aef74112e1cae7acf77f753cbe20bb8bbd203
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  COMPILATION-3.mp3
                  • Path C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en\COMPILATION-3.mp3
                  • Size 17KB
                  • SHA256 0069a0aa7fe69bebf3154744535e3b52ced7362e07e0e832698629f68c02785d
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  CONTINUOUS-2.mp3
                  • Path C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en\CONTINUOUS-2.mp3
                  • Size 26KB
                  • SHA256 a3857040e7a5e315d3fbab41ddb232465fc2b57db4aaedef2f3b74c699f01a8a
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  DRIVERS-1.mp3
                  • Path C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en\DRIVERS-1.mp3
                  • Size 13KB
                  • SHA256 c960f5c70ef3d1a79a789c1ce2523a369b80ee05caedc2fde94a13a8f9f42c41
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  EXPERT-DIAGNOSTICS-1.mp3
                  • Path C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en\EXPERT-DIAGNOSTICS-1.mp3
                  • Size 50KB
                  • SHA256 f2bf2a1650d308c862394383a09529f8d7ab7313707d6545ceb35f841412645e
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  EXPERT-DIAGNOSTICS-2.mp3
                  • Path C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en\EXPERT-DIAGNOSTICS-2.mp3
                  • Size 46KB
                  • SHA256 37570e3dd380a1c779db17d7b4ee8b0ca4a25a2302f7112f087c7ab7dc7da517
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  EXPERT-DIAGNOSTICS-6.mp3
                  • Path C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en\EXPERT-DIAGNOSTICS-6.mp3
                  • Size 13KB
                  • SHA256 0116eef284c5228183cfd27992eda255775e5ea88b4e7739f2779967bd1b6fb8
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  EXPERT-DRIVERS-1.mp3
                  • Path C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en\EXPERT-DRIVERS-1.mp3
                  • Size 25KB
                  • SHA256 1f19a45b24a98014ab4821a1c80b1d2120f54e24cf2517b73f015141d6aa98ed
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  EXPERT-DRIVERS-2.mp3
                  • Path C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en\EXPERT-DRIVERS-2.mp3
                  • Size 25KB
                  • SHA256 9f35f0dbff0fbd1362b8f221550bf9d63e5d30ee8487bb47c78edb1661a52b9b
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  EXPERT-DRIVERS-3.mp3
                  • Path C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en\EXPERT-DRIVERS-3.mp3
                  • Size 36KB
                  • SHA256 540abfdf5e2894d09dded9dfffe2d1be207b484f32f8e0aa237aba52142eeb8a
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  EXPERT-PROGRAMS_CHECKBOX_USED-1.mp3
                  • Path C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en\EXPERT-PROGRAMS_CHECKBOX_USED-1.mp3
                  • Size 42KB
                  • SHA256 90b0c57398a3dc95f089121e0873719e3fce5978a66bc3f8468fdb375287d37a
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  EXPERT-PROGRAMS_CHECKBOX_USED-2.mp3
                  • Path C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en\EXPERT-PROGRAMS_CHECKBOX_USED-2.mp3
                  • Size 28KB
                  • SHA256 a5062cbc572ce18afb6e590a74a299f288c593de995841c13981c25a5cc3fcf1
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  EXPERT-PROTECT-1.mp3
                  • Path C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en\EXPERT-PROTECT-1.mp3
                  • Size 37KB
                  • SHA256 9545c34922b77b59a2fb172bad55f064e14761cf213b89061164cdcbdf8963a7
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  EXPERT-PROTECT-2.mp3
                  • Path C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en\EXPERT-PROTECT-2.mp3
                  • Size 44KB
                  • SHA256 82d48381d03dba7f4a566420a4921553c6aa15bc6a22bc6e08bb6e8466af8274
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  EXPERT-PROTECT-3.mp3
                  • Path C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en\EXPERT-PROTECT-3.mp3
                  • Size 27KB
                  • SHA256 996744756df49ce498243a7fcd70cf5cc9c55f399b8027ed712485c6843d1ced
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  ISTART_1.mp3
                  • Path C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en\ISTART_1.mp3
                  • Size 23KB
                  • SHA256 815f5cdc4f714576ff9e5b6ccab5c4cd227aa87add8237b3e5a88913867e8ce5
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  ISTART_2.mp3
                  • Path C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en\ISTART_2.mp3
                  • Size 42KB
                  • SHA256 df1126cb3c694ba6e5fde3e2149cfa536e02072bcc52dce9cf481fe9f9575401
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  ISTART_3.mp3
                  • Path C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en\ISTART_3.mp3
                  • Size 14KB
                  • SHA256 23a69131f2b1ea74723a087a9e0137c202f4f9439c165c6f0784b2fde7d3e7b6
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  ISTART_4.mp3
                  • Path C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en\ISTART_4.mp3
                  • Size 18KB
                  • SHA256 618eb740f1dcaf902215f7a3d77d69a1a07bcc46ee9e96156d524d1eb3ee38f2
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  SERVICE_MODE-1.mp3
                  • Path C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en\SERVICE_MODE-1.mp3
                  • Size 43KB
                  • SHA256 74ef8c36b37524515e37100952f7a36faa0f3163d6d5388f360dce946ad4fa28
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  SERVICE_MODE-2.mp3
                  • Path C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en\SERVICE_MODE-2.mp3
                  • Size 36KB
                  • SHA256 527f93a6a3159de9a01242e8a1f85c568651bd711da175e5a6c9fe1942224b97
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  START-INITIAL-1.mp3
                  • Path C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en\START-INITIAL-1.mp3
                  • Size 20KB
                  • SHA256 7ce172ba3df0c381dabc6688dc584035860052b57242ec01ee3adc60ccb3bbc3
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  START-SETUP-1.mp3
                  • Path C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en\START-SETUP-1.mp3
                  • Size 24KB
                  • SHA256 f01ce28bdb7af9b93ed9e255d5f2c4b7860c97d2f0d58339dbd489828b3484ba
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  TEAM-PROOF-1.mp3
                  • Path C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en\TEAM-PROOF-1.mp3
                  • Size 40KB
                  • SHA256 07eca9f5ef7741062a9081a42dc70200ab38b0a48f31ac62393332ac24e97089
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  TEAM-PROOF-2.mp3
                  • Path C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en\TEAM-PROOF-2.mp3
                  • Size 60KB
                  • SHA256 09bd89dd7b59b6403c9fc495d8e4780840f9ade3ae9744f684e90876b250f981
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  TEAM-PROOF-3.mp3
                  • Path C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en\TEAM-PROOF-3.mp3
                  • Size 17KB
                  • SHA256 91c9b43045e05c5ea9debee09aec46356c9a286369569508181117ac98f6c487
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  WAITING-1.mp3
                  • Path C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en\WAITING-1.mp3
                  • Size 23KB
                  • SHA256 cc85ff5e54762063c62237ff6e23c59fafe4ccc5b91333aefcc4286b6eb5c68a
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  WAITING-2.mp3
                  • Path C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\en\WAITING-2.mp3
                  • Size 26KB
                  • SHA256 49f80e6ee7ae260d208deea397931f9fd9f6d1cd540e27d2f3e3263385830dba
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  STORIES-adout-8.mp3
                  • Path C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\audio\ru\STORIES-adout-8.mp3
                  • Size 17KB
                  • SHA256 c2f79a0267df7d522b13e49b406f74892cc6744b88204449387a335cf525550d
                  • MD5 SHA1 SHA512 SSDEEP
                  Submit Download

                  config.js
                  • Path C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\config.js
                  • Size 3KB
                  • SHA256 18f86ef3fad86c97d56274e5577b178a77f40587a80451a971013248e37190a6
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  custom-control.css
                  • Path C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\css\custom-control.css
                  • Size 10KB
                  • SHA256 7d7853e95258a7a3f8eaf41795f7124e7d2dacdeb5f1efe212b3ff7ed0da9e50
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  DRPicons-webfont.eot
                  • Path C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\css\fonts\DRPicons\DRPicons-webfont.eot
                  • Size 7KB
                  • SHA256 0a04d85875091cc334f63b90c8ccfa0838f20023945d949296363369066870e3
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  opensans-regular-webfont.eot
                  • Path C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\css\fonts\Open-Sans\opensans-regular-webfont.eot
                  • Size 40KB
                  • SHA256 3ae576bfa96d7cf6614c8c97290c7abe03191a8ceb0c837a21e7ffe70d66ca62
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  ProximaNova-Bold.eot
                  • Path C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\css\fonts\ProximaNova\ProximaNova-Bold.eot
                  • Size 141KB
                  • SHA256 1c3a470bf710204b1dbd65679b914af4b94e7f018b1f7df3d61ff863d6f335d9
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  ProximaNova-Bold.woff
                  • Path C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\css\fonts\ProximaNova\ProximaNova-Bold.woff
                  • Size 57KB
                  • SHA256 2a8f208d9d8556ff58da8a420316de6d634a568a0eeb94c043430659fff7d338
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  proxima_nova_light-webfont.eot
                  • Path C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\css\fonts\ProximaNova\proxima_nova_light-webfont.eot
                  • Size 61KB
                  • SHA256 53f30a622db68cebe92dbd384cc292aef13ad7e3349a10a77c29326e10634c21
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  proxima_nova_semibold-webfont.eot
                  • Path C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\css\fonts\ProximaNova\proxima_nova_semibold-webfont.eot
                  • Size 65KB
                  • SHA256 790579e11608136663d073bc6f99848c04b4dcd69216df7daf5be00df573a3fd
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  icons-checkbox.css
                  • Path C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\css\icons-checkbox.css
                  • Size 444B
                  • SHA256 cb134dcb95a407795c671a512c389894d3525fba3f6a2168fc5b9b7e875e78dc
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  icons.css
                  • Path C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\css\icons.css
                  • Size 509B
                  • SHA256 b5f111103f7f090c246a223b1ff497b94c4dd3ac64bf5b3fb2d91555fcfd6f2c
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  normalize.min.css
                  • Path C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\css\normalize.min.css
                  • Size 1KB
                  • SHA256 86235e2c477078adfe1188d07ca1e5d8198443aaf2436de1785a169f3e1d5463
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  open-sans.css
                  • Path C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\css\open-sans.css
                  • Size 1KB
                  • SHA256 b9bd51ae6ccc7df20417e0ef341295b86bf8f74f6e235ee99ddefd675806f47f
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  proximanova.css
                  • Path C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\css\proximanova.css
                  • Size 2KB
                  • SHA256 931071422410d73d9d7d3583745e476eac23c0cac5fbe344f8436499ee40ac46
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  roboto.css
                  • Path C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\css\roboto.css
                  • Size 1001B
                  • SHA256 2537efe2fb974f58cddbc99abfcd7aed6e9df81992eed3e528b5f1748167b8fa
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  style.css
                  • Path C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\css\style.css
                  • Size 14KB
                  • SHA256 3f8ec31a3c08de6c1aac117347b1b83f391bb0a91c9dbdc57ba9d11d5ba372d5
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  drp.css
                  • Path C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\drp.css
                  • Size 189KB
                  • SHA256 68f09ef8144c09433c19d0d139fde1eda7f0a9b69be828e90410bb51c49cc030
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  drp.js
                  • Path C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\drp.js
                  • Size 3.7MB
                  • SHA256 c0ae6134f693b80d71ece89965cde42c819e815c7218d54fcfad0372a62dec21
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  5.png
                  • Path C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\img\assistant-faces\start-screen\5.png
                  • Size 75KB
                  • SHA256 ad615ef1f7016826d475fe90b4363cc149b060de2b9406b4c58cb4a4f1938bef
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  wifi.png
                  • Path C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\img\device-class\new-ui\wifi.png
                  • Size 1KB
                  • SHA256 4da7ccf08d94f78c5e45554f8998c0e5f6d0a07b8a3a9e4b109543db6bc9ba43
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  new-header-logo.png
                  • Path C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\img\header\new-header-logo.png
                  • Size 4KB
                  • SHA256 98856383428042c14739159f4a62168e9394f774bf2b696d62f46d70fc2ba175
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  banner_catalog-bg-ru.jpg
                  • Path C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\img\installation\banner_catalog-bg-ru.jpg
                  • Size 74KB
                  • SHA256 1fbb1510ae2f6db083cddf7c0f16364d5f5d2938737a297556c268c039a28165
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  DP_Touchpad.png
                  • Path C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\img\installation\drivers\DP_Touchpad.png
                  • Size 888B
                  • SHA256 025e7e8699fd9c246452c6634d4935149baa6a6acadb91b0f9adf52d11a094f9
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  arrow-recommend.png
                  • Path C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\img\new-ui-assistant\arrow-recommend.png
                  • Size 1KB
                  • SHA256 fd42158b4e01b5c86360c9450e9e3db5e399e0eadb28e5420ac69f7da1dc0fc5
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  icon-footer-splite.png
                  • Path C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\img\new-ui-assistant\icon-footer-splite.png
                  • Size 4KB
                  • SHA256 5e45160ca10f9237661f7c76880f1fed2dc5d2e147061daeeac7080df1502774
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  arrow-top.png
                  • Path C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\img\screens\arrow-top.png
                  • Size 2KB
                  • SHA256 4f2785a950320440acd22fcc0274944b971d5975de008f69bf81d19d44842925
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  new-ui-logo2021.png
                  • Path C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\img\screens\new-ui-logo2021.png
                  • Size 5KB
                  • SHA256 a11af07103005c27c0a5f721d99482e4700c21c85afcbc8e44e4e785af5fa902
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  en.js
                  • Path C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\languages\en.js
                  • Size 86KB
                  • SHA256 a3df7c1b150504fb96555d8d7f7b9c4129a3225ba241da983d56a9c7a1404aec
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  run.hta
                  • Path C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\run.hta
                  • Size 2KB
                  • SHA256 02bd627d6825599ed039f053fecbe7f15000b5d5071e9b6baab488befa4f02dd
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  start.bat
                  • Path C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\start.bat
                  • Size 90B
                  • SHA256 88ebe6fc9f45e734243dd674a3cdd9222be692bde089d0bc06726dd32156b892
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  driverpack-wget.exe
                  • Path C:\Users\Admin\AppData\Local\Temp\beetle-cab\ext\tools\driverpack-wget.exe
                  • Size 392KB
                  • SHA256 a48ad33695a44de887bba8f2f3174fd8fb01a46a19e3ec9078b0118647ccf599
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  run_command_3749.txt
                  • Path C:\Users\Admin\AppData\Roaming\DRPSu\temp\run_command_3749.txt
                  • Size 9B
                  • SHA256 51e6af14fa1e9032300dbf76a85cb8561e523e89c363cec09cdc2128801a191d
                  • MD5 SHA1 SHA512
                  Submit Download

                  run_command_47834.txt
                  • Path C:\Users\Admin\AppData\Roaming\DRPSu\temp\run_command_47834.txt
                  • Size 9B
                  • SHA256 195418a93d769a17558aa804568eff487979e62d0731aa8c63d8d0ffc1723321
                  • MD5 SHA1 SHA512
                  Submit Download

                  wget_finished_90003.txt
                  • Path C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_finished_90003.txt
                  • Size 7B
                  • SHA256 9a25234ae91ada142892f61bb4a52640d8854872909068b7b1c307a8e16591ed
                  • MD5 SHA1 SHA512
                  Submit Download

                  wget_log_16750.log
                  • Path C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_16750.log
                  • Size 1KB
                  • SHA256 a47ace838a3b8f22d1cd499cb2b41b79880385307fad70bdea3939092d4d258b
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  wget_log_32839.log
                  • Path C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_32839.log
                  • Size 1KB
                  • SHA256 ea2ae249d98f991b87fec5b8c6df5a31678a1eb3e1368fe77603dc3e4cba023d
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  wget_log_35271.log
                  • Path C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_35271.log
                  • Size 1KB
                  • SHA256 63683a53b45117c4f63498c97967abc4e36c2decb28a208d563969e6246d8baa
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  wget_log_40862.log
                  • Path C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_40862.log
                  • Size 1KB
                  • SHA256 044e0913ca75a6f54e6f0cf3140fcc73b5639fd36eff0039749bcf0936153bda
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  wget_log_46021.log
                  • Path C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_46021.log
                  • Size 1KB
                  • SHA256 7b80d8db83b22aea3eeb8a27e81eecd64745d1a4eac1e580fb8bfd4b9fc3ce9c
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  wget_log_48173.log
                  • Path C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_48173.log
                  • Size 1KB
                  • SHA256 d61329eb2d8933cfb5195ff487646cf9c7a19157342c44c9ea2e5fd2751306ea
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  wget_log_53942.log
                  • Path C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_53942.log
                  • Size 1KB
                  • SHA256 71ec07f0b2ab43c8c38a98a70a5749377a09752a4c5681e35f67d009ee9ebcc2
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  wget_log_55508.log
                  • Path C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_55508.log
                  • Size 1KB
                  • SHA256 f6451316bec088b4840d17c65f2e66627257c1817a0d1855c58f3e5b6c1cef00
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  wget_log_57327.log
                  • Path C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_57327.log
                  • Size 1KB
                  • SHA256 5917aafa91a5d99cdd78ae6f28dffcae65d4c26b04811a20b112bf4f93dccd58
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  wget_log_57552.log
                  • Path C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_57552.log
                  • Size 1KB
                  • SHA256 cb913482615471d672c21b70a4cce6ce650dc4d32a8567f09139a38375e56141
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  wget_log_60602.log
                  • Path C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_60602.log
                  • Size 1KB
                  • SHA256 5fe3fa777ec32a2cd05266784bc7383811cf6e54646e7293657e5504f8895ade
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  wget_log_74825.log
                  • Path C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_74825.log
                  • Size 1KB
                  • SHA256 5b7e6d1165d3240109218e5cd2b08e09dd317d5114e7a6c8dffb4eb3bbb38adf
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  wget_log_77000.log
                  • Path C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_77000.log
                  • Size 1KB
                  • SHA256 364e46df46311bc3fc83664dd5792a735578935e52d88651707ea08017712692
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  wget_log_8742.log
                  • Path C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_8742.log
                  • Size 1KB
                  • SHA256 fab80903b145b44b2127671eb2fdf4d3be651e53c5a71b490c452cbeabbb78ad
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  wget_log_90003.log
                  • Path C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_90003.log
                  • Size 1KB
                  • SHA256 d5eb5f4834b50e68cc341c10d29bab5c02363d762f3ef2013be30c9784a6b1e1
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  wget_log_94116.log
                  • Path C:\Users\Admin\AppData\Roaming\DRPSu\temp\wget_log_94116.log
                  • Size 1KB
                  • SHA256 83be74a4b77831a8a5b29543bda517468a29afc70a1be69e5bfb9b3abc509e7e
                  • MD5 SHA1 SHA512 TLSH
                  Submit Download

                  memory/200-1797-0x0000000000400000-0x00000000004EF000-memory.dmp
                  Download

                  memory/764-1393-0x0000000000400000-0x00000000004EF000-memory.dmp
                  Download

                  memory/768-1332-0x0000000000400000-0x00000000004EF000-memory.dmp
                  Download

                  memory/936-1542-0x0000000000400000-0x00000000004EF000-memory.dmp
                  Download

                  memory/1144-1670-0x0000000000400000-0x00000000004EF000-memory.dmp
                  Download

                  memory/1180-1625-0x0000000000400000-0x00000000004EF000-memory.dmp
                  Download

                  memory/1216-1703-0x0000000000400000-0x00000000004EF000-memory.dmp
                  Download

                  memory/1348-1531-0x0000000000400000-0x00000000004EF000-memory.dmp
                  Download

                  memory/1416-1733-0x0000000000400000-0x00000000004EF000-memory.dmp
                  Download

                  memory/1416-1488-0x0000000000400000-0x00000000004EF000-memory.dmp
                  Download

                  memory/1484-1358-0x0000000000400000-0x00000000004EF000-memory.dmp
                  Download

                  memory/1484-1367-0x0000000000400000-0x00000000004EF000-memory.dmp
                  Download

                  memory/1544-1629-0x0000000000400000-0x00000000004EF000-memory.dmp
                  Download

                  memory/1696-1256-0x0000000000400000-0x00000000004EF000-memory.dmp
                  Download

                  memory/1708-1795-0x0000000000400000-0x00000000004EF000-memory.dmp
                  Download

                  memory/1724-1739-0x0000000000400000-0x00000000004EF000-memory.dmp
                  Download

                  memory/1812-1320-0x0000000000400000-0x00000000004EF000-memory.dmp
                  Download

                  memory/1812-1309-0x0000000000400000-0x00000000004EF000-memory.dmp
                  Download

                  memory/2104-1679-0x0000000000400000-0x00000000004EF000-memory.dmp
                  Download

                  memory/2412-1246-0x0000000000400000-0x00000000004EF000-memory.dmp
                  Download

                  memory/2412-1258-0x0000000000400000-0x00000000004EF000-memory.dmp
                  Download

                  memory/2740-1276-0x0000000000400000-0x00000000004EF000-memory.dmp
                  Download

                  memory/2740-1272-0x0000000000400000-0x00000000004EF000-memory.dmp
                  Download

                  memory/2996-1766-0x0000000000400000-0x00000000004EF000-memory.dmp
                  Download

                  memory/2996-1750-0x0000000000400000-0x00000000004EF000-memory.dmp
                  Download

                  memory/3272-1559-0x0000000000400000-0x00000000004EF000-memory.dmp
                  Download

                  memory/3780-1599-0x0000000000400000-0x00000000004EF000-memory.dmp
                  Download

                  memory/3812-1515-0x0000000000400000-0x00000000004EF000-memory.dmp
                  Download

                  memory/3816-1742-0x0000000000400000-0x00000000004EF000-memory.dmp
                  Download

                  memory/3840-1452-0x0000000000400000-0x00000000004EF000-memory.dmp
                  Download

                  memory/3840-1435-0x0000000000400000-0x00000000004EF000-memory.dmp
                  Download

                  memory/3896-1558-0x0000000000400000-0x00000000004EF000-memory.dmp
                  Download

                  memory/3924-1650-0x0000000000400000-0x00000000004EF000-memory.dmp
                  Download

                  memory/3940-1432-0x0000000000400000-0x00000000004EF000-memory.dmp
                  Download

                  memory/4204-1326-0x0000000000400000-0x00000000004EF000-memory.dmp
                  Download

                  memory/4208-1375-0x0000000000400000-0x00000000004EF000-memory.dmp
                  Download

                  memory/4448-1606-0x0000000000400000-0x00000000004EF000-memory.dmp
                  Download

                  memory/4516-1681-0x0000000000400000-0x00000000004EF000-memory.dmp
                  Download

                  memory/4652-1310-0x0000000000400000-0x00000000004EF000-memory.dmp
                  Download

                  memory/4652-1314-0x0000000000400000-0x00000000004EF000-memory.dmp
                  Download

                  memory/4704-1518-0x0000000000400000-0x00000000004EF000-memory.dmp
                  Download

                  memory/4720-1430-0x0000000000400000-0x00000000004EF000-memory.dmp
                  Download

                  memory/4732-1507-0x0000000000400000-0x00000000004EF000-memory.dmp
                  Download

                  memory/4968-1732-0x0000000000400000-0x00000000004EF000-memory.dmp
                  Download

                  memory/5008-1426-0x0000000000400000-0x00000000004EF000-memory.dmp
                  Download

                  memory/5028-1645-0x0000000000400000-0x00000000004EF000-memory.dmp
                  Download

                  memory/5260-1394-0x0000000000400000-0x00000000004EF000-memory.dmp
                  Download

                  memory/5364-1377-0x0000000000400000-0x00000000004EF000-memory.dmp
                  Download

                  memory/5368-1347-0x0000000000400000-0x00000000004EF000-memory.dmp
                  Download

                  memory/5524-1582-0x0000000000400000-0x00000000004EF000-memory.dmp
                  Download

                  memory/5524-1458-0x0000000000400000-0x00000000004EF000-memory.dmp
                  Download

                  memory/5564-1486-0x0000000000400000-0x00000000004EF000-memory.dmp
                  Download

                  memory/5588-1771-0x0000000000400000-0x00000000004EF000-memory.dmp
                  Download

                  memory/5620-1648-0x0000000000400000-0x00000000004EF000-memory.dmp
                  Download

                  memory/5692-1525-0x0000000000400000-0x00000000004EF000-memory.dmp
                  Download

                  memory/5708-1353-0x0000000000400000-0x00000000004EF000-memory.dmp
                  Download

                  memory/5784-1697-0x0000000000400000-0x00000000004EF000-memory.dmp
                  Download

                  memory/5856-1264-0x0000000000400000-0x00000000004EF000-memory.dmp
                  Download

                  memory/5872-1604-0x0000000000400000-0x00000000004EF000-memory.dmp
                  Download

                  memory/5912-1477-0x0000000000400000-0x00000000004EF000-memory.dmp
                  Download

                  memory/5956-1555-0x0000000000400000-0x00000000004EF000-memory.dmp
                  Download

                  memory/5960-1346-0x0000000000400000-0x00000000004EF000-memory.dmp
                  Download

                  memory/6048-1626-0x0000000000400000-0x00000000004EF000-memory.dmp
                  Download