Analysis
- max time kernel
31s - max time network
124s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
22/08/2026, 05:02
Behavioral task
behavioral1
Sample
2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
General
- Target 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.exe
- Size 1.2MB
- Sample260822-fpfcqseb96
- SHA256 744eb19a26d30a576b36af43aa2db1a7cb7079e2bac25c8f863f40ba9b0a846e
- MD5 d4f3d6718bd36adaddaca2c58d833ec6
- SHA1 8deb5fb85b91101c804f7b9c62a0e465de169067
- SHA512 e8f5809c8b9fddc24f59767163dfdfa48e32947eae2fd82bc9b7b42affeb2738eceb7af1923e133562bfb77a1a2b097b645d18072950653e64d4c39c6872be87
- SSDEEP 12288:BYixUrHGQVL9vwf+SqwLa8Cck3DT4YixUrHGQVL9vwf+SqwLa8Cck3DTi:xxal9vGhqF3DT8xal9vGhqF3DTi
- TLSH T120456A13F65910B8D4AAC178971B6537BA72BC5907317EEB1780AB213E76BE06B3D700
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Detects Shodi worm 2 IoCs
resource yara_rule behavioral2/files/0x001100000001b303-4.dat family_shodi behavioral2/files/0x000c00000001c5e1-68.dat family_shodi - Executes dropped EXE 64 IoCs
pid Process 3840 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 248 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 1588 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 4492 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 1344 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 5944 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 2864 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 4140 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 4576 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 2848 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 4728 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 3880 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 2724 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 4600 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 3856 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 5728 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 4840 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 2392 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 4836 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 752 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 1848 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 2016 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 3420 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 2540 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 2248 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 3644 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 3388 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 1368 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 3972 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 4332 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 1960 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 5136 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 3888 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 4084 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 2528 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 880 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 3956 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 3008 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 5016 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 1216 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 4960 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 4624 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 3920 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 5708 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 4356 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 2236 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 4920 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 3968 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 3236 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 2396 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 5984 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 3580 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 6068 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 5804 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 2652 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 1140 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 5312 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 5308 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 2704 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 5620 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 1736 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 2272 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 1704 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 5684 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa - Drops file in System32 directory 2 IoCs
description ioc Process File created C:\Windows\SysWOW64\UsaShohdi.asu 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.exe File opened for modification C:\Windows\SysWOW64\UsaShohdi.asu 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.exe - Drops file in Program Files directory 3 IoCs
description ioc Process File created \??\c:\Program Files\7-Zip\7zFM.exe 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.exe File opened for modification \??\c:\Program Files\7-Zip\7zFM.usa 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.exe File created \??\c:\Program Files\7-Zip\7zG.exe 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.exe - System Location Discovery: System Language Discovery 1 TTPs 64 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found - Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 1328 wrote to memory of 3840 1328 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.exe 89 PID 3840 wrote to memory of 248 3840 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 90 PID 248 wrote to memory of 1588 248 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 91 PID 1588 wrote to memory of 4492 1588 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 92 PID 4492 wrote to memory of 1344 4492 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 93 PID 1344 wrote to memory of 5944 1344 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 94 PID 5944 wrote to memory of 2864 5944 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 95 PID 2864 wrote to memory of 4140 2864 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 96 PID 4140 wrote to memory of 4576 4140 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 97 PID 4576 wrote to memory of 2848 4576 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 98 PID 2848 wrote to memory of 4728 2848 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 99 PID 4728 wrote to memory of 3880 4728 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 100 PID 3880 wrote to memory of 2724 3880 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 101 PID 2724 wrote to memory of 4600 2724 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 102 PID 4600 wrote to memory of 3856 4600 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 103 PID 3856 wrote to memory of 5728 3856 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 104 PID 5728 wrote to memory of 4840 5728 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 105 PID 4840 wrote to memory of 2392 4840 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 106 PID 2392 wrote to memory of 4836 2392 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 107 PID 4836 wrote to memory of 752 4836 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 108 PID 752 wrote to memory of 1848 752 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 109 PID 1848 wrote to memory of 2016 1848 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 110 PID 2016 wrote to memory of 3420 2016 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 111 PID 3420 wrote to memory of 2540 3420 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 112 PID 2540 wrote to memory of 2248 2540 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 113 PID 2248 wrote to memory of 3644 2248 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 114 PID 3644 wrote to memory of 3388 3644 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 115 PID 3388 wrote to memory of 1368 3388 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 116 PID 1368 wrote to memory of 3972 1368 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 117 PID 3972 wrote to memory of 4332 3972 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 118 PID 4332 wrote to memory of 1960 4332 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 119 PID 1960 wrote to memory of 5136 1960 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 120 PID 5136 wrote to memory of 3888 5136 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 121 PID 3888 wrote to memory of 4084 3888 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 122 PID 4084 wrote to memory of 2528 4084 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 123 PID 2528 wrote to memory of 880 2528 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 124 PID 880 wrote to memory of 3956 880 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 125 PID 3956 wrote to memory of 3008 3956 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 126 PID 3008 wrote to memory of 5016 3008 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 127 PID 5016 wrote to memory of 1216 5016 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 128 PID 1216 wrote to memory of 4960 1216 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 129 PID 4960 wrote to memory of 4624 4960 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 130 PID 4624 wrote to memory of 3920 4624 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 131 PID 3920 wrote to memory of 5708 3920 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 132 PID 5708 wrote to memory of 4356 5708 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 133 PID 4356 wrote to memory of 2236 4356 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 134 PID 2236 wrote to memory of 4920 2236 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 135 PID 4920 wrote to memory of 3968 4920 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 136 PID 3968 wrote to memory of 3236 3968 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 137 PID 3236 wrote to memory of 2396 3236 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 138 PID 2396 wrote to memory of 5984 2396 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 139 PID 5984 wrote to memory of 3580 5984 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 140 PID 3580 wrote to memory of 6068 3580 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 141 PID 6068 wrote to memory of 5804 6068 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 142 PID 5804 wrote to memory of 2652 5804 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 143 PID 2652 wrote to memory of 1140 2652 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 144 PID 1140 wrote to memory of 5312 1140 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 145 PID 5312 wrote to memory of 5308 5312 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 146 PID 5308 wrote to memory of 2704 5308 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 147 PID 2704 wrote to memory of 5620 2704 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 148 PID 5620 wrote to memory of 1736 5620 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 149 PID 1736 wrote to memory of 2272 1736 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 150 PID 2272 wrote to memory of 1704 2272 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 151 PID 1704 wrote to memory of 5684 1704 2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa 152
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.exe"1⤵
- Drops file in System32 directory
- Drops file in Program Files directory
- Suspicious use of WriteProcessMemory
PID:1328 -
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa2⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:3840 -
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa3⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:248 -
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa4⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:1588 -
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa5⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4492 -
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa6⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:1344 -
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa7⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:5944 -
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa8⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:2864 -
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa9⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4140 -
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa10⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4576 -
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa11⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:2848 -
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa12⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4728 -
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa13⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:3880 -
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa14⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:2724 -
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa15⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4600 -
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa16⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:3856 -
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa17⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:5728 -
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa18⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4840 -
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa19⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:2392 -
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa20⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4836 -
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa21⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:752 -
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa22⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:1848 -
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa23⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:2016 -
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa24⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:3420 -
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa25⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:2540 -
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa26⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:2248 -
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa27⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:3644 -
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa28⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:3388 -
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa29⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:1368 -
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa30⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:3972 -
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa31⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4332 -
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa32⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:1960 -
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa33⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:5136 -
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa34⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:3888 -
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa35⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:4084 -
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa36⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:2528 -
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa37⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:880 -
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa38⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:3956 -
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa39⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:3008 -
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa40⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:5016 -
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa41⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:1216 -
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa42⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4960 -
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa43⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4624 -
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa44⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:3920 -
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa45⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:5708 -
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa46⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4356 -
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa47⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:2236 -
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa48⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4920 -
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa49⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:3968 -
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa50⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:3236 -
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa51⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:2396 -
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa52⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:5984 -
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa53⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:3580 -
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa54⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:6068 -
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa55⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:5804 -
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa56⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:2652 -
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa57⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:1140 -
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa58⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:5312 -
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa59⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:5308 -
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa60⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:2704 -
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa61⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:5620 -
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa62⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:1736 -
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa63⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:2272 -
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa64⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:1704 -
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa65⤵
- Executes dropped EXE
PID:5684 -
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa66⤵PID:1732
-
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa67⤵PID:2180
-
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa68⤵PID:4244
-
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa69⤵PID:1812
-
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa70⤵PID:1360
-
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa71⤵PID:2588
-
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa72⤵
- System Location Discovery: System Language Discovery
PID:4964 -
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa73⤵PID:468
-
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa74⤵PID:6084
-
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa75⤵PID:4660
-
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa76⤵PID:3928
-
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa77⤵PID:2836
-
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa78⤵PID:5000
-
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa79⤵PID:1308
-
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa80⤵PID:4516
-
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa81⤵PID:2788
-
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa82⤵PID:3808
-
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa83⤵PID:2944
-
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa84⤵PID:5360
-
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa85⤵PID:5628
-
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa86⤵PID:3200
-
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa87⤵PID:5488
-
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa88⤵PID:5780
-
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa89⤵PID:3084
-
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa90⤵PID:1088
-
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa91⤵PID:5972
-
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa92⤵PID:5464
-
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa93⤵PID:5028
-
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa94⤵PID:6060
-
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa95⤵PID:3160
-
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa96⤵PID:4760
-
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa97⤵PID:504
-
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa98⤵PID:5480
-
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa99⤵PID:2132
-
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa100⤵PID:3376
-
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa101⤵PID:4900
-
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa102⤵PID:1124
-
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa103⤵PID:964
-
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa104⤵PID:1300
-
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa105⤵PID:2076
-
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa106⤵PID:6140
-
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa107⤵PID:2460
-
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa108⤵PID:2504
-
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa109⤵PID:5368
-
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa110⤵PID:2672
-
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa111⤵PID:5416
-
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa112⤵PID:3952
-
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa113⤵
- System Location Discovery: System Language Discovery
PID:5336 -
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa114⤵PID:4584
-
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa115⤵PID:6028
-
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa116⤵PID:4832
-
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa117⤵PID:3176
-
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa118⤵PID:5820
-
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa119⤵PID:5328
-
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa120⤵PID:5344
-
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa121⤵PID:5740
-
C:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-08-21_d4f3d6718bd36adaddaca2c58d833ec6_akira_cloudeye_elex_rhadamanthys.usa122⤵PID:4316
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-