Analysis
- max time kernel
27s - max time network
144s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
06/08/2026, 18:06
Behavioral task
behavioral1
Sample
2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
General
- Target 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.exe
- Size 1.9MB
- Sample260806-wpqfpsxcpe
- SHA256 a29af7d531d237ccefcc9ef4b7562f92b4ce927eeabcf73e32ac149b5ab837d6
- MD5 45d02bae74c0edd45a6bdeae9c390114
- SHA1 b188610a30a451902a0de462ac43bae8508e2752
- SHA512 77a88e556ad876fed47be6005997ee94df06dcea7f030f0c2937473e09118ee33ecb1afdbbcc00a64ed6f74d16cbd992bf22d0a84e83d44d616584e8819e0522
- SSDEEP 49152:CwxgGhqFU2887e1butmk/wxgGhqFU2887e1butmkq:CnU2ZxnU2Z4
- TLSH T13C959D13F68110B9D45AC230931EAA36B631B9295731AEDB9780AF313F65BE06F3D744
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Detects Shodi worm 2 IoCs
resource yara_rule behavioral2/files/0x000d000000016cdc-3.dat family_shodi behavioral2/files/0x000c00000001c5e5-68.dat family_shodi - Executes dropped EXE 64 IoCs
pid Process 4368 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 4256 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 4964 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 2296 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 1260 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 2976 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 4660 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 4152 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 3520 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 4784 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 1840 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 2456 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 5208 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 4488 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 4168 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 5680 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 4272 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 6036 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 1348 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 1336 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 4108 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 5324 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 2732 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 5528 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 4284 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 2636 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 5572 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 4824 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 5024 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 4880 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 2776 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 3348 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 5076 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 1572 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 2992 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 5760 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 1908 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 1764 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 5520 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 1848 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 5776 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 3764 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 6052 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 1188 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 5688 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 1584 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 4984 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 756 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 5044 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 2392 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 4692 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 2476 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 2568 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 3948 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 5908 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 4896 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 4916 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 2064 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 2132 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 5784 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 5096 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 4596 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 4720 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 4288 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa - System Location Discovery: System Language Discovery 1 TTPs 64 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa - Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 5048 wrote to memory of 4368 5048 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.exe 89 PID 4368 wrote to memory of 4256 4368 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 90 PID 4256 wrote to memory of 4964 4256 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 91 PID 4964 wrote to memory of 2296 4964 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 92 PID 2296 wrote to memory of 1260 2296 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 93 PID 1260 wrote to memory of 2976 1260 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 94 PID 2976 wrote to memory of 4660 2976 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 95 PID 4660 wrote to memory of 4152 4660 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 96 PID 4152 wrote to memory of 3520 4152 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 97 PID 3520 wrote to memory of 4784 3520 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 98 PID 4784 wrote to memory of 1840 4784 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 99 PID 1840 wrote to memory of 2456 1840 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 100 PID 2456 wrote to memory of 5208 2456 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 101 PID 5208 wrote to memory of 4488 5208 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 102 PID 4488 wrote to memory of 4168 4488 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 103 PID 4168 wrote to memory of 5680 4168 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 104 PID 5680 wrote to memory of 4272 5680 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 105 PID 4272 wrote to memory of 6036 4272 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 106 PID 6036 wrote to memory of 1348 6036 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 107 PID 1348 wrote to memory of 1336 1348 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 108 PID 1336 wrote to memory of 4108 1336 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 109 PID 4108 wrote to memory of 5324 4108 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 110 PID 5324 wrote to memory of 2732 5324 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 111 PID 2732 wrote to memory of 5528 2732 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 112 PID 5528 wrote to memory of 4284 5528 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 113 PID 4284 wrote to memory of 2636 4284 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 114 PID 2636 wrote to memory of 5572 2636 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 115 PID 5572 wrote to memory of 4824 5572 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 116 PID 4824 wrote to memory of 5024 4824 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 117 PID 5024 wrote to memory of 4880 5024 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 118 PID 4880 wrote to memory of 2776 4880 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 119 PID 2776 wrote to memory of 3348 2776 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 120 PID 3348 wrote to memory of 5076 3348 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 121 PID 5076 wrote to memory of 1572 5076 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 122 PID 1572 wrote to memory of 2992 1572 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 123 PID 2992 wrote to memory of 5760 2992 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 124 PID 5760 wrote to memory of 1908 5760 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 125 PID 1908 wrote to memory of 1764 1908 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 126 PID 1764 wrote to memory of 5520 1764 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 127 PID 5520 wrote to memory of 1848 5520 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 128 PID 1848 wrote to memory of 5776 1848 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 129 PID 5776 wrote to memory of 3764 5776 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 130 PID 3764 wrote to memory of 6052 3764 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 131 PID 6052 wrote to memory of 1188 6052 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 132 PID 1188 wrote to memory of 5688 1188 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 133 PID 5688 wrote to memory of 1584 5688 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 134 PID 1584 wrote to memory of 4984 1584 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 135 PID 4984 wrote to memory of 756 4984 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 136 PID 756 wrote to memory of 5044 756 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 137 PID 5044 wrote to memory of 2392 5044 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 138 PID 2392 wrote to memory of 4692 2392 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 139 PID 4692 wrote to memory of 2476 4692 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 140 PID 2476 wrote to memory of 2568 2476 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 141 PID 2568 wrote to memory of 3948 2568 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 142 PID 3948 wrote to memory of 5908 3948 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 143 PID 5908 wrote to memory of 4896 5908 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 144 PID 4896 wrote to memory of 4916 4896 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 145 PID 4916 wrote to memory of 2064 4916 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 146 PID 2064 wrote to memory of 2132 2064 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 147 PID 2132 wrote to memory of 5784 2132 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 148 PID 5784 wrote to memory of 5096 5784 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 149 PID 5096 wrote to memory of 4596 5096 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 150 PID 4596 wrote to memory of 4720 4596 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 151 PID 4720 wrote to memory of 4288 4720 2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa 152
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:5048 -
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa2⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4368 -
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa3⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4256 -
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa4⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4964 -
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa5⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:2296 -
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa6⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:1260 -
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa7⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:2976 -
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa8⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4660 -
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa9⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4152 -
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa10⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:3520 -
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa11⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4784 -
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa12⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:1840 -
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa13⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:2456 -
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa14⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:5208 -
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa15⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4488 -
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa16⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4168 -
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa17⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:5680 -
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa18⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4272 -
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa19⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:6036 -
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa20⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:1348 -
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa21⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:1336 -
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa22⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4108 -
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa23⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:5324 -
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa24⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:2732 -
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa25⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:5528 -
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa26⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4284 -
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa27⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:2636 -
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa28⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:5572 -
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa29⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4824 -
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa30⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:5024 -
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa31⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4880 -
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa32⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:2776 -
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa33⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:3348 -
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa34⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:5076 -
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa35⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:1572 -
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa36⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:2992 -
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa37⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:5760 -
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa38⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:1908 -
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa39⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:1764 -
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa40⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:5520 -
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa41⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:1848 -
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa42⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:5776 -
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa43⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:3764 -
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa44⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:6052 -
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa45⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:1188 -
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa46⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:5688 -
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa47⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:1584 -
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa48⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4984 -
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa49⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:756 -
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa50⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:5044 -
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa51⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:2392 -
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa52⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4692 -
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa53⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:2476 -
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa54⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:2568 -
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa55⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:3948 -
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa56⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:5908 -
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa57⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4896 -
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa58⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4916 -
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa59⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:2064 -
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa60⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:2132 -
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa61⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:5784 -
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa62⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:5096 -
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa63⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4596 -
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa64⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4720 -
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa65⤵
- Executes dropped EXE
PID:4288 -
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa66⤵PID:2564
-
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa67⤵PID:1328
-
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa68⤵PID:3396
-
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa69⤵PID:1844
-
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa70⤵PID:812
-
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa71⤵PID:5832
-
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa72⤵PID:5164
-
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa73⤵PID:3432
-
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa74⤵PID:2688
-
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa75⤵
- System Location Discovery: System Language Discovery
PID:4760 -
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa76⤵
- System Location Discovery: System Language Discovery
PID:1076 -
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa77⤵PID:5976
-
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa78⤵PID:4544
-
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa79⤵PID:4716
-
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa80⤵PID:1640
-
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa81⤵PID:2152
-
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa82⤵PID:2080
-
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa83⤵PID:6140
-
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa84⤵PID:4672
-
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa85⤵PID:4516
-
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa86⤵PID:5972
-
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa87⤵PID:3344
-
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa88⤵PID:5756
-
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa89⤵PID:3856
-
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa90⤵PID:5424
-
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa91⤵PID:2072
-
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa92⤵PID:5284
-
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa93⤵PID:5004
-
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa94⤵PID:3716
-
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa95⤵PID:4576
-
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa96⤵PID:2576
-
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa97⤵PID:2436
-
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa98⤵PID:3292
-
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa99⤵PID:4008
-
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa100⤵PID:1124
-
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa101⤵PID:4336
-
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa102⤵
- System Location Discovery: System Language Discovery
PID:5744 -
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa103⤵PID:1868
-
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa104⤵PID:4532
-
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa105⤵PID:2052
-
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa106⤵PID:3592
-
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa107⤵PID:6020
-
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa108⤵PID:4876
-
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa109⤵PID:1228
-
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa110⤵PID:6064
-
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa111⤵PID:5100
-
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa112⤵PID:1360
-
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa113⤵PID:5872
-
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa114⤵PID:5944
-
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa115⤵PID:5084
-
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa116⤵PID:1164
-
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa117⤵PID:1132
-
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa118⤵PID:6112
-
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa119⤵PID:1972
-
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa120⤵PID:5800
-
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa121⤵PID:4364
-
C:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-06_45d02bae74c0edd45a6bdeae9c390114_akira_elex_rhadamanthys.usa122⤵PID:256
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-