Analysis
- max time kernel
150s - max time network
127s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
14/08/2026, 10:31
Behavioral task
behavioral1
Sample
2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
General
- Target 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.exe
- Size 1.2MB
- Sample260814-mkcjlshq21
- SHA256 ec326c589b29dc2ebf52bc7bf73e5fbdde6d35ef1ea51b72f554ece0c08f0939
- MD5 42e6394064f47c45436da08954b49302
- SHA1 dee3dc49f955d3c48a7bcc2d4f546583d00403c7
- SHA512 553c79470e1cbc48a78d5385d03b4fefe53f23e195b4e0b4c33790f45abf6eb10e7161cfbae7eb6f184dfabbbbc97576a72e473e778ec85eba532951c6f72a9d
- SSDEEP 12288:BYixUrHGQVL9vwf+SqwLa8Cck3DTOYixUrHGQVL9vwf+SqwLa8Cck3DTi:xxal9vGhqF3DTexal9vGhqF3DTi
- TLSH T16D456A17F65910B8D4AAC178971B6537BA72BC1907317EEB1780AB213E76BE06B3D700
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Detects Shodi worm 2 IoCs
resource yara_rule behavioral2/files/0x0008000000016b4d-3.dat family_shodi behavioral2/files/0x000d00000001c4a2-68.dat family_shodi - Executes dropped EXE 64 IoCs
pid Process 3308 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 1792 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 4172 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 1860 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 2924 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 3116 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 268 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 244 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 4728 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 6060 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 3056 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 1816 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 4876 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 1220 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 1900 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 4856 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 2540 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 3860 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 5876 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 3376 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 4912 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 3236 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 5128 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 3548 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 4224 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 5316 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 3952 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 1376 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 1092 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 2440 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 5368 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 4312 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 2068 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 2960 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 2784 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 5792 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 5580 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 4688 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 5704 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 3284 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 4580 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 736 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 3004 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 4348 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 5532 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 4768 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 5716 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 4284 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 3016 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 4612 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 3944 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 5524 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 3940 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 5292 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 5244 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 5596 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 1864 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 3164 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 3980 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 5372 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 5968 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 1008 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 2492 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 4480 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa - System Location Discovery: System Language Discovery 1 TTPs 64 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa - Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 4112 wrote to memory of 3308 4112 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.exe 88 PID 3308 wrote to memory of 1792 3308 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 90 PID 1792 wrote to memory of 4172 1792 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 91 PID 4172 wrote to memory of 1860 4172 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 92 PID 1860 wrote to memory of 2924 1860 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 93 PID 2924 wrote to memory of 3116 2924 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 94 PID 3116 wrote to memory of 268 3116 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 95 PID 268 wrote to memory of 244 268 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 96 PID 244 wrote to memory of 4728 244 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 97 PID 4728 wrote to memory of 6060 4728 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 98 PID 6060 wrote to memory of 3056 6060 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 99 PID 3056 wrote to memory of 1816 3056 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 100 PID 1816 wrote to memory of 4876 1816 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 101 PID 4876 wrote to memory of 1220 4876 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 102 PID 1220 wrote to memory of 1900 1220 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 103 PID 1900 wrote to memory of 4856 1900 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 104 PID 4856 wrote to memory of 2540 4856 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 105 PID 2540 wrote to memory of 3860 2540 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 106 PID 3860 wrote to memory of 5876 3860 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 107 PID 5876 wrote to memory of 3376 5876 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 108 PID 3376 wrote to memory of 4912 3376 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 109 PID 4912 wrote to memory of 3236 4912 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 110 PID 3236 wrote to memory of 5128 3236 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 111 PID 5128 wrote to memory of 3548 5128 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 112 PID 3548 wrote to memory of 4224 3548 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 113 PID 4224 wrote to memory of 5316 4224 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 114 PID 5316 wrote to memory of 3952 5316 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 115 PID 3952 wrote to memory of 1376 3952 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 116 PID 1376 wrote to memory of 1092 1376 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 117 PID 1092 wrote to memory of 2440 1092 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 118 PID 2440 wrote to memory of 5368 2440 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 119 PID 5368 wrote to memory of 4312 5368 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 120 PID 4312 wrote to memory of 2068 4312 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 121 PID 2068 wrote to memory of 2960 2068 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 122 PID 2960 wrote to memory of 2784 2960 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 123 PID 2784 wrote to memory of 5792 2784 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 124 PID 5792 wrote to memory of 5580 5792 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 125 PID 5580 wrote to memory of 4688 5580 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 126 PID 4688 wrote to memory of 5704 4688 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 127 PID 5704 wrote to memory of 3284 5704 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 128 PID 3284 wrote to memory of 4580 3284 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 129 PID 4580 wrote to memory of 736 4580 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 130 PID 736 wrote to memory of 3004 736 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 131 PID 3004 wrote to memory of 4348 3004 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 132 PID 4348 wrote to memory of 5532 4348 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 133 PID 5532 wrote to memory of 4768 5532 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 134 PID 4768 wrote to memory of 5716 4768 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 135 PID 5716 wrote to memory of 4284 5716 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 136 PID 4284 wrote to memory of 3016 4284 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 137 PID 3016 wrote to memory of 4612 3016 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 138 PID 4612 wrote to memory of 3944 4612 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 139 PID 3944 wrote to memory of 5524 3944 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 140 PID 5524 wrote to memory of 3940 5524 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 141 PID 3940 wrote to memory of 5292 3940 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 142 PID 5292 wrote to memory of 5244 5292 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 143 PID 5244 wrote to memory of 5596 5244 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 144 PID 5596 wrote to memory of 1864 5596 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 145 PID 1864 wrote to memory of 3164 1864 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 146 PID 3164 wrote to memory of 3980 3164 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 147 PID 3980 wrote to memory of 5372 3980 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 148 PID 5372 wrote to memory of 5968 5372 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 149 PID 5968 wrote to memory of 1008 5968 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 150 PID 1008 wrote to memory of 2492 1008 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 151 PID 2492 wrote to memory of 4480 2492 2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa 152
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:4112 -
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa2⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:3308 -
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa3⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:1792 -
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa4⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4172 -
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa5⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:1860 -
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa6⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:2924 -
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa7⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:3116 -
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa8⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:268 -
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa9⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:244 -
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa10⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4728 -
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa11⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:6060 -
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa12⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:3056 -
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa13⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:1816 -
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa14⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:4876 -
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa15⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:1220 -
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa16⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:1900 -
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa17⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4856 -
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa18⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:2540 -
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa19⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:3860 -
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa20⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:5876 -
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa21⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:3376 -
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa22⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4912 -
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa23⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:3236 -
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa24⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:5128 -
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa25⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:3548 -
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa26⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4224 -
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa27⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:5316 -
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa28⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:3952 -
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa29⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:1376 -
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa30⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:1092 -
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa31⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:2440 -
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa32⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:5368 -
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa33⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4312 -
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa34⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:2068 -
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa35⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:2960 -
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa36⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:2784 -
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa37⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:5792 -
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa38⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:5580 -
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa39⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4688 -
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa40⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:5704 -
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa41⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:3284 -
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa42⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4580 -
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa43⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:736 -
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa44⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:3004 -
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa45⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4348 -
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa46⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:5532 -
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa47⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4768 -
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa48⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:5716 -
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa49⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4284 -
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa50⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:3016 -
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa51⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4612 -
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa52⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:3944 -
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa53⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:5524 -
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa54⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:3940 -
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa55⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:5292 -
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa56⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:5244 -
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa57⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:5596 -
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa58⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:1864 -
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa59⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:3164 -
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa60⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:3980 -
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa61⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:5372 -
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa62⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:5968 -
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa63⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:1008 -
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa64⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:2492 -
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa65⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
PID:4480 -
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa66⤵PID:2432
-
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa67⤵PID:4388
-
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa68⤵PID:4960
-
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa69⤵PID:5400
-
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa70⤵PID:3252
-
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa71⤵PID:2136
-
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa72⤵PID:6076
-
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa73⤵PID:1472
-
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa74⤵PID:2836
-
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa75⤵PID:2604
-
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa76⤵PID:1244
-
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa77⤵PID:2600
-
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa78⤵PID:4496
-
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa79⤵PID:4568
-
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa80⤵PID:6004
-
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa81⤵PID:812
-
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa82⤵PID:2480
-
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa83⤵PID:3000
-
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa84⤵PID:1780
-
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa85⤵PID:2572
-
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa86⤵PID:4892
-
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa87⤵PID:3524
-
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa88⤵PID:5740
-
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa89⤵PID:4896
-
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa90⤵PID:5696
-
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa91⤵PID:3856
-
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa92⤵PID:3756
-
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa93⤵PID:1924
-
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa94⤵PID:4484
-
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa95⤵PID:3408
-
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa96⤵
- System Location Discovery: System Language Discovery
PID:6116 -
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa97⤵PID:2528
-
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa98⤵PID:2804
-
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa99⤵PID:1940
-
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa100⤵PID:3848
-
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa101⤵PID:3864
-
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa102⤵PID:4740
-
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa103⤵PID:4304
-
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa104⤵PID:2536
-
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa105⤵PID:2940
-
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa106⤵PID:2412
-
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa107⤵PID:5980
-
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa108⤵PID:1976
-
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa109⤵
- System Location Discovery: System Language Discovery
PID:3392 -
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa110⤵PID:4864
-
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa111⤵PID:1768
-
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa112⤵PID:4164
-
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa113⤵PID:2292
-
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa114⤵PID:3448
-
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa115⤵PID:5936
-
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa116⤵PID:1640
-
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa117⤵PID:5468
-
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa118⤵PID:5420
-
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa119⤵PID:1276
-
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa120⤵PID:3332
-
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa121⤵PID:5300
-
C:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-14_42e6394064f47c45436da08954b49302_akira_cloudeye_elex_rhadamanthys.usa122⤵PID:2144
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-