Analysis
- max time kernel
36s - max time network
152s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
08/08/2026, 11:37
Behavioral task
behavioral1
Sample
2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
General
- Target 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.exe
- Size 1.2MB
- Sample260808-nrgycaem8v
- SHA256 532038f4bf84ca94579236a46f2643acb0737e0522daac2c745dc5e4c1780b5b
- MD5 9522ae25957cccdfcde94cb50b11b69a
- SHA1 0eeb172efc0320d7c981e702e5d57de4a4b7e509
- SHA512 b819ed4036db4417569ab18d7db2864c829627128ec3b9e539cbe876bd3d45f4bc07a68a79bec878a6596c9b82f94be0fa52f48a9ee6eb67a4552de03cbd45cc
- SSDEEP 12288:PYixUrHGQVL9vwf+SqwLa8Cck3DTyUjDbYixUrHGQVL9vwf+SqwLa8Cck3DTyUjJ:jxal9vGhqF3DTHxal9vGhqF3DT1
- TLSH T1C3455A13F65950B9D4AAC138971B6537BA72BC1A07317EDB1780BB212E76BE06B3D700
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Detects Shodi worm 2 IoCs
resource yara_rule behavioral2/files/0x001100000001b303-3.dat family_shodi behavioral2/files/0x000d00000001c4e6-68.dat family_shodi - Executes dropped EXE 64 IoCs
pid Process 6000 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 4564 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 5668 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 4108 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 4776 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 4544 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 4152 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 1504 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 5828 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 4120 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 3132 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 4092 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 3596 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 5152 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 2584 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 5644 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 1272 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 5568 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 5800 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 1328 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 828 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 5740 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 5296 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 1372 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 4272 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 1208 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 4992 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 1292 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 5952 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 2884 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 3808 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 1936 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 2496 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 4640 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 240 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 4756 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 3832 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 3936 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 2964 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 4384 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 1368 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 5756 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 2064 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 5840 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 5440 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 5780 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 5496 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 1832 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 4796 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 4088 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 2512 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 3248 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 5620 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 3352 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 3460 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 912 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 5016 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 5584 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 4800 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 4932 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 4980 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 5720 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 6016 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 1848 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa - Drops file in System32 directory 2 IoCs
description ioc Process File opened for modification C:\Windows\SysWOW64\UsaShohdi.asu 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.exe File created C:\Windows\SysWOW64\UsaShohdi.asu 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.exe - Drops file in Program Files directory 9 IoCs
description ioc Process File opened for modification \??\c:\Program Files\7-Zip\7zFM.usa 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.exe File opened for modification \??\c:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.usa 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.exe File created \??\c:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.exe File created \??\c:\Program Files\7-Zip\7zFM.exe 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.exe File created \??\c:\Program Files\7-Zip\7zG.exe 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.exe File opened for modification \??\c:\Program Files\7-Zip\7zG.usa 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.exe File created \??\c:\Program Files\7-Zip\Uninstall.exe 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.exe File opened for modification \??\c:\Program Files\7-Zip\Uninstall.usa 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.exe File created \??\c:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.exe - System Location Discovery: System Language Discovery 1 TTPs 64 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa - Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 908 wrote to memory of 6000 908 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.exe 89 PID 6000 wrote to memory of 4564 6000 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 90 PID 4564 wrote to memory of 5668 4564 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 91 PID 5668 wrote to memory of 4108 5668 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 92 PID 4108 wrote to memory of 4776 4108 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 93 PID 4776 wrote to memory of 4544 4776 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 94 PID 4544 wrote to memory of 4152 4544 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 95 PID 4152 wrote to memory of 1504 4152 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 96 PID 1504 wrote to memory of 5828 1504 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 97 PID 5828 wrote to memory of 4120 5828 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 98 PID 4120 wrote to memory of 3132 4120 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 99 PID 3132 wrote to memory of 4092 3132 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 100 PID 4092 wrote to memory of 3596 4092 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 101 PID 3596 wrote to memory of 5152 3596 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 102 PID 5152 wrote to memory of 2584 5152 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 103 PID 2584 wrote to memory of 5644 2584 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 104 PID 5644 wrote to memory of 1272 5644 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 105 PID 1272 wrote to memory of 5568 1272 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 106 PID 5568 wrote to memory of 5800 5568 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 107 PID 5800 wrote to memory of 1328 5800 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 108 PID 1328 wrote to memory of 828 1328 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 109 PID 828 wrote to memory of 5740 828 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 110 PID 5740 wrote to memory of 5296 5740 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 111 PID 5296 wrote to memory of 1372 5296 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 112 PID 1372 wrote to memory of 4272 1372 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 113 PID 4272 wrote to memory of 1208 4272 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 114 PID 1208 wrote to memory of 4992 1208 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 115 PID 4992 wrote to memory of 1292 4992 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 116 PID 1292 wrote to memory of 5952 1292 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 117 PID 5952 wrote to memory of 2884 5952 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 118 PID 2884 wrote to memory of 3808 2884 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 119 PID 3808 wrote to memory of 1936 3808 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 120 PID 1936 wrote to memory of 2496 1936 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 121 PID 2496 wrote to memory of 4640 2496 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 122 PID 4640 wrote to memory of 240 4640 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 123 PID 240 wrote to memory of 4756 240 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 124 PID 4756 wrote to memory of 3832 4756 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 125 PID 3832 wrote to memory of 3936 3832 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 126 PID 3936 wrote to memory of 2964 3936 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 127 PID 2964 wrote to memory of 4384 2964 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 128 PID 4384 wrote to memory of 1368 4384 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 129 PID 1368 wrote to memory of 5756 1368 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 130 PID 5756 wrote to memory of 2064 5756 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 131 PID 2064 wrote to memory of 5840 2064 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 132 PID 5840 wrote to memory of 5440 5840 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 133 PID 5440 wrote to memory of 5780 5440 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 134 PID 5780 wrote to memory of 5496 5780 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 135 PID 5496 wrote to memory of 1832 5496 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 136 PID 1832 wrote to memory of 4796 1832 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 137 PID 4796 wrote to memory of 4088 4796 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 138 PID 4088 wrote to memory of 2512 4088 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 139 PID 2512 wrote to memory of 3248 2512 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 140 PID 3248 wrote to memory of 5620 3248 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 141 PID 5620 wrote to memory of 3352 5620 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 142 PID 3352 wrote to memory of 3460 3352 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 143 PID 3460 wrote to memory of 912 3460 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 144 PID 912 wrote to memory of 5016 912 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 145 PID 5016 wrote to memory of 5584 5016 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 146 PID 5584 wrote to memory of 4800 5584 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 147 PID 4800 wrote to memory of 4932 4800 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 148 PID 4932 wrote to memory of 4980 4932 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 149 PID 4980 wrote to memory of 5720 4980 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 150 PID 5720 wrote to memory of 6016 5720 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 151 PID 6016 wrote to memory of 1848 6016 2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa 152
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.exe"1⤵
- Drops file in System32 directory
- Drops file in Program Files directory
- Suspicious use of WriteProcessMemory
PID:908 -
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa2⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:6000 -
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa3⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4564 -
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa4⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:5668 -
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa5⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4108 -
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa6⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4776 -
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa7⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:4544 -
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa8⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4152 -
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa9⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:1504 -
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa10⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:5828 -
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa11⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4120 -
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa12⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:3132 -
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa13⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4092 -
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa14⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:3596 -
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa15⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:5152 -
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa16⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:2584 -
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa17⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:5644 -
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa18⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:1272 -
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa19⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:5568 -
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa20⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:5800 -
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa21⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:1328 -
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa22⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:828 -
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa23⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:5740 -
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa24⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:5296 -
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa25⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:1372 -
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa26⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4272 -
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa27⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:1208 -
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa28⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4992 -
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa29⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:1292 -
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa30⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:5952 -
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa31⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:2884 -
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa32⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:3808 -
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa33⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:1936 -
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa34⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:2496 -
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa35⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4640 -
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa36⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:240 -
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa37⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4756 -
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa38⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:3832 -
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa39⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:3936 -
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa40⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:2964 -
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa41⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4384 -
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa42⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:1368 -
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa43⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:5756 -
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa44⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:2064 -
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa45⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:5840 -
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa46⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:5440 -
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa47⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:5780 -
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa48⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:5496 -
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa49⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:1832 -
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa50⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4796 -
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa51⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4088 -
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa52⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:2512 -
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa53⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:3248 -
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa54⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:5620 -
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa55⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:3352 -
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa56⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:3460 -
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa57⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:912 -
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa58⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:5016 -
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa59⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:5584 -
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa60⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4800 -
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa61⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4932 -
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa62⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4980 -
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa63⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:5720 -
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa64⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:6016 -
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa65⤵
- Executes dropped EXE
PID:1848 -
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa66⤵PID:1184
-
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa67⤵PID:6040
-
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa68⤵PID:716
-
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa69⤵PID:4864
-
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa70⤵PID:4888
-
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa71⤵PID:2768
-
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa72⤵PID:2988
-
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa73⤵PID:1028
-
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa74⤵PID:5984
-
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa75⤵
- System Location Discovery: System Language Discovery
PID:4612 -
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa76⤵PID:2772
-
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa77⤵PID:2188
-
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa78⤵PID:2260
-
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa79⤵PID:4424
-
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa80⤵PID:4592
-
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa81⤵PID:412
-
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa82⤵PID:1176
-
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa83⤵PID:1172
-
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa84⤵PID:2684
-
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa85⤵PID:2740
-
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa86⤵PID:4476
-
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa87⤵PID:1592
-
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa88⤵PID:1920
-
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa89⤵PID:5564
-
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa90⤵PID:5796
-
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa91⤵
- System Location Discovery: System Language Discovery
PID:3748 -
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa92⤵PID:5380
-
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa93⤵PID:1568
-
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa94⤵PID:1348
-
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa95⤵PID:2828
-
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa96⤵PID:3964
-
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa97⤵
- System Location Discovery: System Language Discovery
PID:5612 -
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa98⤵PID:3564
-
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa99⤵PID:4352
-
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa100⤵PID:5232
-
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa101⤵PID:2992
-
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa102⤵PID:3648
-
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa103⤵PID:4324
-
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa104⤵PID:5392
-
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa105⤵PID:2172
-
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa106⤵PID:2656
-
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa107⤵PID:2972
-
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa108⤵PID:4132
-
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa109⤵PID:5664
-
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa110⤵PID:4684
-
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa111⤵PID:4552
-
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa112⤵PID:4596
-
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa113⤵PID:4084
-
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa114⤵PID:1860
-
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa115⤵PID:2460
-
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa116⤵PID:2472
-
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa117⤵PID:2820
-
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa118⤵PID:1204
-
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa119⤵PID:1916
-
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa120⤵PID:5900
-
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa121⤵PID:1276
-
C:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-08_9522ae25957cccdfcde94cb50b11b69a_akira_cloudeye_elex_rhadamanthys.usa122⤵PID:5280
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-