00b9637f49e9559c7da0890b6781fb2d2b55c411f0c641f505bd71f39c4dc137

Analysis

max time kernel
150s
max time network
131s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
20/10/2026, 08:51

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
Size 4.3MB
Sample261020-kslfdafv41
SHA256 00b9637f49e9559c7da0890b6781fb2d2b55c411f0c641f505bd71f39c4dc137
MD5 18064ee82d117a2751936ec9f145f9b0
SHA1 8a7ac6d80c4d91f5dbf57fbbe866ff5cba51c358
SHA512 a95e183591c9e1a2ef0bcf85fcb08175df5bbdfd2790fe092a6b7fc2fb556cd633d1bb661703c15c9ec82ae5346101c56137489068d188d06016b524c587d6e3
SSDEEP 98304:5HO2WSxmxfRiBs4kSwpTOLVnuYXJxEd2PidpZGDpZ:yaLVnuYXJxEd2PSyv
TLSH
T197264900B79204D8C92A913C9763F57DF2B1F8540BF09AD712A602796F3ABD55C36F2A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 1 IoCs

Adversaries may check for Internet connectivity on compromised systems.

discovery

Internet Connection Discovery

T1016.001

pid	Process
4616	2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4168 wrote to memory of 4364	4168	2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe	91
PID 4168 wrote to memory of 2336	4168	2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe	92
PID 4168 wrote to memory of 2456	4168	2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe	93
PID 4168 wrote to memory of 2696	4168	2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe	94
PID 4168 wrote to memory of 5568	4168	2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe	95
PID 4168 wrote to memory of 1968	4168	2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe	96
PID 4168 wrote to memory of 4764	4168	2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe	97
PID 4168 wrote to memory of 5032	4168	2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe	98
PID 4168 wrote to memory of 4224	4168	2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe	99
PID 4168 wrote to memory of 3004	4168	2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe	100
PID 4168 wrote to memory of 2032	4168	2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe	101
PID 4168 wrote to memory of 5500	4168	2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe	102
PID 4168 wrote to memory of 3628	4168	2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe	103
PID 4168 wrote to memory of 2896	4168	2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe	104
PID 4168 wrote to memory of 5980	4168	2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe	105
PID 4168 wrote to memory of 4500	4168	2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe	106
PID 4168 wrote to memory of 4260	4168	2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe	107
PID 4168 wrote to memory of 4532	4168	2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe	108
PID 4168 wrote to memory of 5560	4168	2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe	109
PID 4168 wrote to memory of 3640	4168	2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe	110
PID 4168 wrote to memory of 240	4168	2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe	111
PID 4168 wrote to memory of 4304	4168	2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe	112
PID 4168 wrote to memory of 5684	4168	2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe	113
PID 4168 wrote to memory of 5988	4168	2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe	114
PID 4168 wrote to memory of 4252	4168	2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe	115
PID 4168 wrote to memory of 4412	4168	2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe	116
PID 4168 wrote to memory of 2220	4168	2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe	117
PID 4168 wrote to memory of 2628	4168	2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe	118
PID 4168 wrote to memory of 5256	4168	2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe	119
PID 4168 wrote to memory of 3752	4168	2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe	120
PID 4168 wrote to memory of 4784	4168	2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe	121
PID 4168 wrote to memory of 1776	4168	2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe	122
PID 4168 wrote to memory of 1104	4168	2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe	123
PID 4168 wrote to memory of 3236	4168	2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe	124
PID 4168 wrote to memory of 2888	4168	2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe	125
PID 4168 wrote to memory of 1000	4168	2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe	126
PID 4168 wrote to memory of 4864	4168	2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe	127
PID 4168 wrote to memory of 2756	4168	2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe	128
PID 4168 wrote to memory of 2936	4168	2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe	129
PID 4168 wrote to memory of 6088	4168	2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe	130
PID 4168 wrote to memory of 1620	4168	2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe	131
PID 4168 wrote to memory of 1524	4168	2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe	132
PID 4168 wrote to memory of 3596	4168	2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe	133
PID 4168 wrote to memory of 5400	4168	2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe	134
PID 4168 wrote to memory of 3772	4168	2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe	135
PID 4168 wrote to memory of 1692	4168	2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe	136
PID 4168 wrote to memory of 4852	4168	2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe	137
PID 4168 wrote to memory of 2816	4168	2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe	138
PID 4168 wrote to memory of 5960	4168	2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe	139
PID 4168 wrote to memory of 4752	4168	2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe	140
PID 4168 wrote to memory of 556	4168	2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe	141
PID 4168 wrote to memory of 2232	4168	2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe	142
PID 4168 wrote to memory of 4892	4168	2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe	143
PID 4168 wrote to memory of 2228	4168	2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe	144
PID 4168 wrote to memory of 4008	4168	2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe	145
PID 4168 wrote to memory of 2856	4168	2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe	146
PID 4168 wrote to memory of 3048	4168	2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe	147
PID 4168 wrote to memory of 2708	4168	2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe	148
PID 4168 wrote to memory of 2504	4168	2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe	149
PID 4168 wrote to memory of 3524	4168	2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe	150
PID 4168 wrote to memory of 2824	4168	2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe	151
PID 4168 wrote to memory of 616	4168	2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe	152
PID 4168 wrote to memory of 4476	4168	2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe	153
PID 4168 wrote to memory of 5172	4168	2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe	154

C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4168
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=0 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_in"
  2⤵
  PID:4364
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=1 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_out"
  2⤵
  PID:2336
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=2 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_mem_hook_all"
  2⤵
  PID:2456
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=3 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_inc_dec_pxor"
  2⤵
  PID:2696
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=4 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_avx_vpxor_ymm"
  2⤵
  PID:5568
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=5 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_avx_vex128_zero_upper"
  2⤵
  PID:1968
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=6 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_avx_scalar_zero_upper"
  2⤵
  PID:4764
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=7 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_avx_fma_ps"
  2⤵
  PID:5032
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=8 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fma_scalar_variants"
  2⤵
  PID:4224
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=9 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_avx2_broadcast_permute"
  2⤵
  PID:3004
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=10 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_avx2_variable_shifts"
  2⤵
  PID:2032
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=11 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_avx2_mask_gather"
  2⤵
  PID:5500
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=12 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_avx_vzeroall"
  2⤵
  PID:3628
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=13 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_aes_pclmul"
  2⤵
  PID:2896
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=14 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_avx512_tcg_mask"
  2⤵
  PID:5980
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=15 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vaes_vex_gating"
  2⤵
  PID:4500
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=16 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vpclmulqdq_tcg_mask"
  2⤵
  PID:4260
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=17 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vnni_ifma_ne_cpuid"
  2⤵
  PID:4532
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=18 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vnni_ifma_ne_vectors"
  2⤵
  PID:5560
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=19 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vnni_ifma_ne_ud"
  2⤵
  PID:3640
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=20 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ptwrite_ud"
  2⤵
  PID:240
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=21 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vsha512"
  2⤵
  PID:4304
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=22 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vsm3"
  2⤵
  PID:5684
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=23 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vsm4"
  2⤵
  PID:5988
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=24 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_tsx_rtm_always_abort"
  2⤵
  PID:4252
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=25 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_relative_jump"
  2⤵
  PID:4412
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=26 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_loop"
  2⤵
  PID:2220
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=27 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_invalid_mem_read"
  2⤵
  PID:2628
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=28 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_invalid_mem_write"
  2⤵
  PID:5256
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=29 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_invalid_jump"
  2⤵
  PID:3752
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=30 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_64_syscall"
  2⤵
  PID:4784
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=31 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_16_add"
  2⤵
  PID:1776
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=32 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_reg_save"
  2⤵
  PID:1104
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=33 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_invalid_mem_read_stop_in_cb"
  2⤵
  PID:3236
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=34 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_x87_fnstenv"
  2⤵
  PID:2888
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=35 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_mmio"
  2⤵
  PID:1000
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=36 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_missing_code"
  2⤵
  PID:4864
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=37 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_smc_xor"
  2⤵
  PID:2756
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=38 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_smc_add"
  2⤵
  PID:2936
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=39 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_smc_mem_hook"
  2⤵
  PID:6088
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=40 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_mmio_uc_mem_rw"
  2⤵
  PID:1620
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=41 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sysenter"
  2⤵
  PID:1524
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=42 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_hook_cpuid"
  2⤵
  PID:3596
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=43 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_486_cpuid"
  2⤵
  PID:5400
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=44 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_qemu72_xsave_cpuid"
  2⤵
  PID:3772
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=45 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_opmask_registers"
  2⤵
  PID:1692
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=46 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_qemu72_msr_state"
  2⤵
  PID:4852
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=47 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_clear_tb_cache"
  2⤵
  PID:2816
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=48 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_clear_empty_tb"
  2⤵
  PID:5960
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=49 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_self_linked_tb_guest_smc"
  2⤵
  PID:4752
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=50 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_two_page_tb_invalidation"
  2⤵
  PID:556
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=51 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_tb_cache_engine_isolation"
  2⤵
  PID:2232
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=52 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_hook_tcg_op"
  2⤵
  PID:4892
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=53 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_cmpxchg"
  2⤵
  PID:2228
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=54 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_cmpxchg32_accumulator"
  2⤵
  PID:4008
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=55 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_cmpxchg32_register"
  2⤵
  PID:2856
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=56 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ret_imm16_unsigned"
  2⤵
  PID:3048
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=57 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_rorx_rip_relative_imm"
  2⤵
  PID:2708
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=58 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_shld_rip_relative_imm"
  2⤵
  PID:2504
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=59 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_shrd_rip_relative_imm"
  2⤵
  PID:3524
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=60 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_pdep32_zero_extend"
  2⤵
  PID:2824
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=61 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_pext32_zero_extend"
  2⤵
  PID:616
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=62 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_nested_emu_start"
  2⤵
  PID:4476
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=63 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_nested_emu_stop"
  2⤵
  PID:5172
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=64 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_64_nested_emu_start_error"
  2⤵
  PID:1892
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=65 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_eflags_reserved_bit"
  2⤵
  PID:5748
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=66 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_blsi_cf"
  2⤵
  PID:4828
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=67 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_blsr_flags"
  2⤵
  PID:3684
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=68 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_blsmsk_flags"
  2⤵
  PID:484
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=69 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_bzhi_index_boundary"
  2⤵
  PID:4280
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=70 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_nested_uc_emu_start_exits"
  2⤵
  PID:5740
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=71 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_clear_count_cache"
  2⤵
  PID:4544
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=72 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_correct_address_in_small_jump_hook"
  2⤵
  PID:1144
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=73 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_correct_address_in_long_jump_hook"
  2⤵
  PID:1332
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=74 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_invalid_vex_l"
  2⤵
  PID:5628
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=75 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sse_aligned_access"
  2⤵
  PID:4608
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=76 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_data_watchpoint"
  2⤵
  PID:6056
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=77 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_lazy_mapping"
  2⤵
  - System Network Configuration Discovery: Internet Connection Discovery
  PID:4616
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=78 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_16_incorrect_ip"
  2⤵
  PID:3216
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=79 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_mmu"
  2⤵
  PID:4012
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=80 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_read_virtual"
  2⤵
  PID:1548
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=81 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vtlb"
  2⤵
  PID:3064
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=82 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_segmentation"
  2⤵
  PID:2636
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=83 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_0xff_lcall"
  2⤵
  PID:4740
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=84 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_64_not_overwriting_tmp0_for_pc_update"
  2⤵
  PID:4128
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=85 --no-exec --no-summary --verbose=2 --color=always -- "test_fxsave_fpip_x86"
  2⤵
  PID:2068
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=86 --no-exec --no-summary --verbose=2 --color=always -- "test_fxsave_fpip_x64"
  2⤵
  PID:2392
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=87 --no-exec --no-summary --verbose=2 --color=always -- "test_bswap_x64"
  2⤵
  PID:1500
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=88 --no-exec --no-summary --verbose=2 --color=always -- "test_rex_x64"
  2⤵
  PID:5996
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=89 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ro_segfault"
  2⤵
  PID:5712
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=90 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vpermilps_null_ptr_call"
  2⤵
  PID:2644
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=91 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_hook_insn_rdtsc"
  2⤵
  PID:5936
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=92 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_hook_insn_rdtscp"
  2⤵
  PID:1960
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=93 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_hook_insn_wrmsr"
  2⤵
  PID:4328
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=94 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_hook_insn_rdmsr"
  2⤵
  PID:3768
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=95 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_dr7"
  2⤵
  PID:5028
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=96 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_hook_block"
  2⤵
  PID:2420
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=97 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_mem_hooks_pc_guarantee"
  2⤵
  PID:2268
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=98 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_aaa_flags"
  2⤵
  PID:4644
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=99 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_aas_flags"
  2⤵
  PID:2460
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=100 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_group_1a"
  2⤵
  PID:2912
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=101 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_lock_bt_mem"
  2⤵
  PID:5656
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=102 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_lock_bt_reg"
  2⤵
  PID:1528
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=103 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_lock_btc_mem"
  2⤵
  PID:1128
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=104 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_lock_btc_reg"
  2⤵
  PID:1840
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=105 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_avx512_optin"
  2⤵
  PID:5504
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=106 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_avx512_xsetbv"
  2⤵
  PID:4100
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=107 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_zmm_api_32"
  2⤵
  PID:1860
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=108 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_avx512_xsave"
  2⤵
  PID:5588
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=109 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_avx512_xsavec"
  2⤵
  PID:2528
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=110 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_avx512_xsave_32"
  2⤵
  PID:748
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=111 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_avx512_cpuid"
  2⤵
  PID:5828
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=112 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vex_zero_maxvl"
  2⤵
  PID:5884
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=113 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_keylocker_cpuid"
  2⤵
  PID:5196
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=114 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_keylocker_zero_iwkey_vector"
  2⤵
  PID:1864
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=115 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_keylocker_aes128"
  2⤵
  PID:3928
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=116 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_keylocker_wide256"
  2⤵
  PID:4716
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=117 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_keylocker_faults"
  2⤵
  PID:1520
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=118 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_keylocker_cpl3"
  2⤵
  PID:3308
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=119 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_rao_int"
  2⤵
  PID:3132
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=120 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_movrs_prefetchrst2"
  2⤵
  PID:3172
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=121 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_user_msr"
  2⤵
  PID:2124
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=122 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_uintr_uif"
  2⤵
  PID:5000
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=123 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_uintr_senduipi"
  2⤵
  PID:564
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=124 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_uintr_delivery"
  2⤵
  PID:5460
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=125 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_waitpkg"
  2⤵
  PID:6076
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=126 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_enqcmd"
  2⤵
  PID:1964
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=127 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_smx_pconfig_sgx"
  2⤵
  PID:928
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=128 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_cet_shadow_stack"
  2⤵
  PID:1780
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=129 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_cet_shadow_stack_32"
  2⤵
  PID:2328
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=130 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_cet_call_ret"
  2⤵
  PID:3352
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=131 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_cet_ibt"
  2⤵
  PID:5648
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=132 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_cet_shadow_stack_paging"
  2⤵
  PID:2436
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=133 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_cet2_far_call_ret"
  2⤵
  PID:2056
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=134 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_cet2_call_gate"
  2⤵
  PID:2568
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=135 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_cet2_iret"
  2⤵
  PID:552
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=136 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_cet2_iret_vm86"
  2⤵
  PID:2200
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=137 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_cet2_sysret_sysexit"
  2⤵
  PID:2004
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=138 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_cet2_task_switch"
  2⤵
  PID:5512
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=139 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_cet2_xsaves"
  2⤵
  PID:4732
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=140 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_cet2_endbr_rex2"
  2⤵
  PID:1328
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=141 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_opmask_optin"
  2⤵
  PID:3292
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=142 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_opmask_vectors"
  2⤵
  PID:5516
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=143 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_opmask_ud"
  2⤵
  PID:4744
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=144 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_opmask_features"
  2⤵
  PID:4832
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=145 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_opmask_state"
  2⤵
  PID:5520
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=146 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_lock_hint_nops"
  2⤵
  PID:4760
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=147 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_mpx_modrm_length"
  2⤵
  PID:3588
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=148 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vex_b_32"
  2⤵
  PID:2748
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=149 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_mem_write_invalidates_tb"
  2⤵
  PID:264
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=150 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_amx_optin"
  2⤵
  PID:256
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=151 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_amx_xsetbv"
  2⤵
  PID:2596
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=152 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_amx_api"
  2⤵
  PID:5244
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=153 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_amx_cfg_insns"
  2⤵
  PID:2632
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=154 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_amx_load_store"
  2⤵
  PID:4680
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=155 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_amx_tmul_vectors"
  2⤵
  PID:4212
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=156 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_amx_exceptions"
  2⤵
  PID:3224
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=157 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_amx_xsave"
  2⤵
  PID:5144
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=158 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_amx_xfd"
  2⤵
  PID:1272
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=159 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_evex_routing"
  2⤵
  PID:2052
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=160 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_evex_32bit_fields"
  2⤵
  PID:3076
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=161 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_evex_state"
  2⤵
  PID:5944
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=162 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_evex_masked_memory"
  2⤵
  PID:5836
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=163 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_evex_riprel"
  2⤵
  PID:6100
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=164 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_evex_gather_restart"
  2⤵
  PID:6020
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=165 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_evex_gather_hooks"
  2⤵
  PID:2216
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=166 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_evex_scatter_restart"
  2⤵
  PID:3412
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=167 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_evex_scatter_order"
  2⤵
  PID:4276
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=168 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_evex_vsib_modes"
  2⤵
  PID:5732
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=169 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_evex_scalar_memory"
  2⤵
  PID:1284
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=170 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_evex_comis_eflags"
  2⤵
  PID:5948
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=171 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_evex_m2_memory"
  2⤵
  PID:5576
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=172 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_evex_m2_features"
  2⤵
  PID:3824
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=173 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_evex_bw_cpuid"
  2⤵
  PID:4804
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=174 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_evex_bw_masked_bytes"
  2⤵
  PID:944
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=175 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_evex_bw_kmask64"
  2⤵
  PID:2484
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=176 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_avx512dq_gating"
  2⤵
  PID:2080
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=177 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_avx512dq_values"
  2⤵
  PID:2144
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=178 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_avx512cd_optin"
  2⤵
  PID:4272
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=179 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_avx512cd_gating"
  2⤵
  PID:4292
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=180 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_avx512_m4_bits"
  2⤵
  PID:2544
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=181 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_evex_cvt_narrow"
  2⤵
  PID:4780
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=182 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_evex_cvt_ph_store"
  2⤵
  PID:600
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=183 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_evex_cvt_scalar_merge"
  2⤵
  PID:4176
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=184 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_evex_cvt_gpr_w"
  2⤵
  PID:4524
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=185 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_evex_cvt_xm"
  2⤵
  PID:2400
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=186 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_f16c_vcvtps2ph_ftz"
  2⤵
  PID:2932
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=187 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sdm_documented_deviations"
  2⤵
  PID:5772
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=188 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fp16_optin"
  2⤵
  PID:3048
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=189 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fp16_gating"
  2⤵
  PID:2708
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=190 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fp16_xm"
  2⤵
  PID:4664
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=191 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fp16_complex"
  2⤵
  PID:872
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=192 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fp16_cvt_gpr"
  2⤵
  PID:844
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=193 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_avx10_optin"
  2⤵
  PID:1876
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=194 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_avx10_gating"
  2⤵
  PID:2812
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=195 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_avx10_2_gating"
  2⤵
  PID:3404
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=196 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_avx10b_ctl"
  2⤵
  PID:2688
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=197 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_avx10b_gating"
  2⤵
  PID:4368
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=198 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_avx10b_values"
  2⤵
  PID:3324
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=199 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_avx10b_fault_suppression"
  2⤵
  PID:4444
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=200 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vx_avx10_cpuid"
  2⤵
  PID:4912
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=201 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vx_v2aux_ctl"
  2⤵
  PID:4932
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=202 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vx_salc_udb"
  2⤵
  PID:2820
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=203 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sse_unmasked_ou"
  2⤵
  PID:4868
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=204 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sse_dpps_steps"
  2⤵
  PID:4544
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=205 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_mxcsr_api"
  2⤵
  PID:1332
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=206 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_cpuid_strict_default"
  2⤵
  PID:5488
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=207 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_bp_tcg_temp_overflow"
  2⤵
  PID:5628
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=208 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_bp_iret_vm86"
  2⤵
  PID:6056
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=209 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_bp_rdpmc_gp"
  2⤵
  PID:4616
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=210 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_bp_vex_vvvv3_32"
  2⤵
  PID:3216
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=211 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_bp_lock_new_decoder"
  2⤵
  PID:4012
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=212 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_bp_lock_old_decoder"
  2⤵
  PID:1548
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=213 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_bp_pause_tf"
  2⤵
  PID:2160
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=214 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_bp_ss_sti_tf"
  2⤵
  PID:3724
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=215 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_bp_syscall_modes"
  2⤵
  PID:4740
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=216 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_bp_mov_dr"
  2⤵
  PID:4128
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=217 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_bp_dr7_gd"
  2⤵
  PID:2068
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=218 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_bp_tss16_selectors"
  2⤵
  PID:2392
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=219 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_bp_tss16_gpr_upper"
  2⤵
  PID:1500
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=220 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_bp_tss_save_old_format"
  2⤵
  PID:5996
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=221 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_bp_cs_base_fetch"
  2⤵
  PID:5712
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=222 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_bp_canonical_ss_cs_base"
  2⤵
  PID:2644
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=223 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_m4b_vp2i_optin"
  2⤵
  PID:5936
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=224 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_m4b_vp2i_gating"
  2⤵
  PID:1960
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=225 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_m4b_evex_gating"
  2⤵
  PID:4328
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=226 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_m4a_optin"
  2⤵
  PID:3768
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=227 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_m4a_gating"
  2⤵
  PID:5028
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=228 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_m4a_values"
  2⤵
  PID:2420
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=229 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_f2_lss_rexw"
  2⤵
  PID:2268
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=230 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_f2_stack64"
  2⤵
  PID:4644
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=231 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_f2_store_no_partial"
  2⤵
  PID:2460
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=232 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_f2_store_no_partial_paging"
  2⤵
  PID:2912
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=233 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_f2_maxphyaddr"
  2⤵
  PID:2884
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=234 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_f2_syscall_sce"
  2⤵
  PID:5656
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=235 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_f2_rdpmc"
  2⤵
  PID:1128
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=236 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_apx_optin"
  2⤵
  PID:4448
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=237 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_apx_regs"
  2⤵
  PID:1840
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=238 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_apx_xsave"
  2⤵
  PID:4100
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=239 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_apx_gating"
  2⤵
  PID:1860
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=240 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_apx_rex2_decode"
  2⤵
  PID:5588
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=241 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_apx_evex"
  2⤵
  PID:2528
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=242 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ax4_decode"
  2⤵
  PID:748
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=243 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ax4_gating"
  2⤵
  PID:5828
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=244 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ax4_jmpabs"
  2⤵
  PID:5884
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=245 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ax4_user_msr"
  2⤵
  PID:5196
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=246 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_amx2_optin"
  2⤵
  PID:3012
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=247 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_amx2_exceptions"
  2⤵
  PID:1864
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=248 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_amx2_values"
  2⤵
  PID:4716
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=249 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_amx2_xsaves"
  2⤵
  PID:1520
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=250 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx3_flags_at_fault"
  2⤵
  PID:3308
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=251 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx3_flags_mem_hook"
  2⤵
  PID:3132
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=252 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx3_enter"
  2⤵
  PID:3172
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=253 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx3_far_limits"
  2⤵
  PID:2124
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=254 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx3_far_call_pushes"
  2⤵
  PID:3300
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=255 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx3_cmpxchg_ro"
  2⤵
  PID:5000
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=256 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx3_vsib_pending_db"
  2⤵
  PID:5460
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=257 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_axc_wrss_paging"
  2⤵
  PID:6076
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=258 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_axc_evex_r4_kreg"
  2⤵
  PID:5388
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=259 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_axc_apx_nci_ndd_nf"
  2⤵
  PID:1964
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=260 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xm_x87_ptr_profiles"
  2⤵
  PID:1780
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=261 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xm_scatter_write_hook"
  2⤵
  PID:2328
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=262 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_rg_mmx_regs"
  2⤵
  PID:3352
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=263 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_rg_pkru"
  2⤵
  PID:5648
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=264 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_rg_context_roundtrip"
  2⤵
  PID:1552
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=265 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_rg_context_reg_write"
  2⤵
  PID:2436
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=266 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_rg_context_tlb"
  2⤵
  PID:2900
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=267 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_rg_cpuid_0d1_ebx"
  2⤵
  PID:2568
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=268 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_rg_rdrand_seeded"
  2⤵
  PID:2200
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=269 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_rg_rdrand_context"
  2⤵
  PID:2004
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=270 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_rg_rdrand_host"
  2⤵
  PID:5512
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=271 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_rg_ac_conditions"
  2⤵
  PID:4732
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=272 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_rg_ac_helpers"
  2⤵
  PID:1328
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=273 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx4_exc_record"
  2⤵
  PID:1132
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=274 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx4_far_limits_gp0"
  2⤵
  PID:5500
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=275 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx4_selector_codes"
  2⤵
  PID:3628
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=276 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx4_ss0"
  2⤵
  PID:3240
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=277 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx4_pf_codes"
  2⤵
  PID:5928
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=278 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx4_cp_codes"
  2⤵
  PID:4560
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=279 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx4_ts"
  2⤵
  PID:3008
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=280 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx4_cr2_probe"
  2⤵
  PID:5520
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=281 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx4_rep_cmps_restore"
  2⤵
  PID:4760
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=282 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx4_hook_flags"
  2⤵
  PID:3588
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=283 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx4_store_stop"
  2⤵
  PID:2748
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=284 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx4_store_prepare"
  2⤵
  PID:240
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=285 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx4_store_evex"
  2⤵
  PID:264
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=286 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx4_store_partial"
  2⤵
  PID:2596
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=287 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx4_call_ss_pf"
  2⤵
  PID:5244
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=288 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx4_store_amx"
  2⤵
  PID:2632
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=289 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx4_mpx_bndcfg"
  2⤵
  PID:4680
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=290 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx4_mpx_bndcfg_load"
  2⤵
  PID:2100
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=291 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx4_hook_flags_apx"
  2⤵
  PID:5652
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=292 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_si_vpmov_dq"
  2⤵
  PID:5152
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=293 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_si_wrmsrns"
  2⤵
  PID:1868
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=294 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_si_msrlist"
  2⤵
  PID:4332
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=295 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_si_msr_imm"
  2⤵
  PID:4232
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=296 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_si_hreset"
  2⤵
  PID:4784
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=297 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_si_lkgs"
  2⤵
  PID:5024
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=298 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_si_invpcid"
  2⤵
  PID:2880
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=299 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_si_pbndkb"
  2⤵
  PID:5236
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=300 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_pc_tme_msrs"
  2⤵
  PID:3464
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=301 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_pc_pconfig"
  2⤵
  PID:1472
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=302 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx5_probe_write_unmapped"
  2⤵
  PID:4576
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=303 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx5_mstore_write_once"
  2⤵
  PID:2076
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=304 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx5_partial_reads"
  2⤵
  PID:2740
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=305 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx5_context_writes"
  2⤵
  PID:4656
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=306 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sm_sysenter_rip"
  2⤵
  PID:2204
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=307 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sm_syscall"
  2⤵
  PID:3168
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=308 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sm_syscall_cet"
  2⤵
  PID:4244
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=309 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sm_sysenter"
  2⤵
  PID:5076
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=310 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sm_sysret_flags"
  2⤵
  PID:4548
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=311 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sm_sysexit"
  2⤵
  PID:4768
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=312 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sm_msr_present"
  2⤵
  PID:4888
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=313 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sm_msr_values"
  2⤵
  PID:5008
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=314 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sm_pmu"
  2⤵
  PID:4860
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=315 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xp_optin"
  2⤵
  PID:4856
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=316 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xp_4vnniw"
  2⤵
  PID:3420
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=317 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xp_4fmaps"
  2⤵
  PID:4908
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=318 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xp_pf"
  2⤵
  PID:4340
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=319 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xp_er"
  2⤵
  PID:2380
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=320 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ap_reset_state"
  2⤵
  PID:2228
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=321 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ap_base_transitions"
  2⤵
  PID:4008
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=322 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ap_tpr_cr8"
  2⤵
  PID:2856
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=323 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ap_self_ipi"
  2⤵
  PID:4004
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=324 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ap_priority_eoi"
  2⤵
  PID:1976
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=325 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ap_nmi"
  2⤵
  PID:1908
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=326 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ap_errors"
  2⤵
  PID:3844
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=327 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ap_unsupported"
  2⤵
  PID:5348
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=328 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ap_no_hook"
  2⤵
  PID:4476
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=329 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ap_context"
  2⤵
  PID:5708
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=330 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ap_bus_api"
  2⤵
  PID:5216
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=331 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ap_cross_ipi"
  2⤵
  PID:4516
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=332 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ap_multi_vcpu"
  2⤵
  PID:3056
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=333 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ap_uintr_cross"
  2⤵
  PID:3192
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=334 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ap_uintr_if0"
  2⤵
  PID:5200
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=335 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ap_uintr_cross_delivery"
  2⤵
  PID:5220
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=336 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ap_idt_delivery"
  2⤵
  PID:4904
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=337 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_rc_rcp14_tables"
  2⤵
  PID:3984
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=338 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_rc_rsqrt14_tables"
  2⤵
  PID:5668
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=339 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_rc_scalar"
  2⤵
  PID:1756
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=340 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_rc_fp16"
  2⤵
  PID:1084
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=341 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_rc_bf16"
  2⤵
  PID:1080
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=342 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_rc_legacy"
  2⤵
  PID:752
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=343 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_rc_bounds"
  2⤵
  PID:2448
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=344 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_amb2_rows"
  2⤵
  PID:5016
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=345 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_amb2_fp64_bound"
  2⤵
  PID:2304
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=346 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_amb2_tiny"
  2⤵
  PID:5896
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=347 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_amb2_exp2d_gap"
  2⤵
  PID:2620
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=348 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ig_tme_api"
  2⤵
  PID:2664
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=349 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ig_apic_api"
  2⤵
  PID:3064
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=350 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ig_context_msr"
  2⤵
  PID:4136
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=351 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ts_tse_optin"
  2⤵
  PID:3716
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=352 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ts_tse_key_program"
  2⤵
  PID:4144
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=353 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ts_tse_wrapped"
  2⤵
  PID:1732
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=354 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ts_msr_api_refused"
  2⤵
  PID:1652
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=355 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ts_apic_profile"
  2⤵
  PID:5788
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=356 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ts_context_never_saved"
  2⤵
  PID:3208
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=357 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ts_itd"
  2⤵
  PID:2724
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=358 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_tf32_optin"
  2⤵
  PID:2388
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=359 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_tf32_exceptions"
  2⤵
  PID:940
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=360 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_tf32_values"
  2⤵
  PID:3212
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=361 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_tsefix_cap_layout"
  2⤵
  PID:852
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=362 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_tsefix_enc_alg"
  2⤵
  PID:2960
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=363 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_tsefix_reserved"
  2⤵
  PID:5004
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=364 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xs_ts_nm"
  2⤵
  PID:1256
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=365 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xs_ts_order"
  2⤵
  PID:2668
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=366 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xs_cpuid_hv_range"
  2⤵
  PID:1224
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=367 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xs_xgetbv1_profile"
  2⤵
  PID:5888
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=368 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fl_fred_enum"
  2⤵
  PID:4748
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=369 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fl_fred_deliver_cpl0"
  2⤵
  PID:1296
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=370 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fl_fred_stack_levels"
  2⤵
  PID:3220
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=371 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fl_fred_nested"
  2⤵
  PID:5880
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=372 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fl_fred_disallowed"
  2⤵
  PID:5792
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=373 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fl_erets"
  2⤵
  PID:4432
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=374 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fl_eretu_syscall"
  2⤵
  PID:3468
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=375 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fl_erets_shadow"
  2⤵
  PID:5116
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=376 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fl_fred_far"
  2⤵
  PID:5868
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=377 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fl_lam"
  2⤵
  PID:5544
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=378 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fl_lam_paging"
  2⤵
  PID:2956
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=379 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fl_eret_legacy"
  2⤵
  PID:4668
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=380 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_st_xsetbv_profile"
  2⤵
  PID:5232
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=381 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_st_nx_fetch"
  2⤵
  PID:2964
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=382 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_st_smc_remap"
  2⤵
  PID:4800
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=383 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_st_unmap_paging"
  2⤵
  PID:8
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=384 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_st_reset_xcr0_profile"
  2⤵
  PID:3776
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=385 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sgx_cpuid"
  2⤵
  PID:4220
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=386 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sgx_platform_ctl"
  2⤵
  PID:5840
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=387 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sgx_msr"
  2⤵
  PID:5140
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=388 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sgx_invd"
  2⤵
  PID:2996
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=389 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sgx_build_einit"
  2⤵
  PID:1172
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=390 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sgx_ecreate_eadd_checks"
  2⤵
  PID:5476
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=391 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sgx_encls_gates"
  2⤵
  PID:5440
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=392 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sgx_abort_page"
  2⤵
  PID:5460
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=393 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sgx_eremove_epa_eblock"
  2⤵
  PID:5932
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=394 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sgx_edbg"
  2⤵
  PID:5552
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=395 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sgx_eenter_eexit"
  2⤵
  PID:3836
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=396 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sgx_aex_eresume"
  2⤵
  PID:2696
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=397 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sgx_enclave_access"
  2⤵
  PID:3580
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=398 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sgx_enclave_debug"
  2⤵
  PID:2108
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=399 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sgx_ereport_egetkey"
  2⤵
  PID:4980
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=400 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sgx_ewb_eld"
  2⤵
  PID:5248
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=401 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sgx_sgx2"
  2⤵
  PID:2556
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=402 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_gs_smx"
  2⤵
  PID:4764
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=403 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sgx_xfrm_osxsave"
  2⤵
  PID:5044
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=404 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sgx_cet_ibt"
  2⤵
  PID:3388
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=405 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sgx_aex_delivery"
  2⤵
  PID:3004
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=406 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sgx_enclave32"
  2⤵
  PID:2692
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=407 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_idterr_vector64"
  2⤵
  PID:5480
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=408 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_idterr_ext64"
  2⤵
  PID:3556
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=409 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_idterr_cs64"
  2⤵
  PID:3292
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=410 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_optin"
  2⤵
  PID:5516
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=411 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_lifecycle"
  2⤵
  PID:4744
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=412 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_vmread_vmwrite"
  2⤵
  PID:3484
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=413 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_invept"
  2⤵
  PID:4704
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=414 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_entry_exit"
  2⤵
  PID:4640
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=415 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_nonroot_insn"
  2⤵
  PID:244
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=416 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_inject"
  2⤵
  PID:4972
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=417 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_cr_dr"
  2⤵
  PID:2100
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=418 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_cond_exits"
  2⤵
  PID:1776
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=419 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_io_msr"
  2⤵
  PID:1472
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=420 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_exc_bitmap"
  2⤵
  PID:1524
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=421 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_intr_nmi"
  2⤵
  PID:944
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=422 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_ept"
  2⤵
  PID:4888
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=423 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_apicv_tpr_x2apic"
  2⤵
  PID:2544
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=424 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_apicv_access"
  2⤵
  PID:4176
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=425 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_apicv_posted"
  2⤵
  PID:2400
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=426 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_fred"
  2⤵
  PID:5772
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=427 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_pending_dbg"
  2⤵
  PID:6116
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=428 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_lam_cr3"
  2⤵
  PID:616
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=429 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_prefix_root"
  2⤵
  PID:5748
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=430 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_prefix_guest"
  2⤵
  PID:2688
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=431 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_prefix_misc"
  2⤵
  PID:2592
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=432 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_encls"
  2⤵
  PID:2532
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=433 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_sgx_enc_events"
  2⤵
  PID:2724
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=434 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_sgx_exit"
  2⤵
  PID:4328
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=435 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_sgx_mtf"
  2⤵
  PID:3212
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=436 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_sgx_apic"
  2⤵
  PID:1616
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=437 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_exit_caps"
  2⤵
  PID:956
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=438 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_proc3"
  2⤵
  PID:2460
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=439 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_pdbg_save"
  2⤵
  PID:5660
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=440 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_mtf_tf"
  2⤵
  PID:4228
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=441 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_inj_len"
  2⤵
  PID:1840
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=442 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_ept_ve"
  2⤵
  PID:1860
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=443 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_mtf_tpr"
  2⤵
  PID:748
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=444 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_ept_ve2"
  2⤵
  PID:2340
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=445 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_inj_len15"
  2⤵
  PID:3016
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=446 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_pdpte_tme"
  2⤵
  PID:1864
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=447 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_inj_df"
  2⤵
  PID:1520
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=448 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_ve_gpa48"
  2⤵
  PID:4220
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=449 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_host_cr3_tme"
  2⤵
  PID:1912
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=450 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_tx_optin"
  2⤵
  PID:5140
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=451 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_tx_seamrr"
  2⤵
  PID:1720
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=452 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_tx_insn"
  2⤵
  PID:2348
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=453 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_tm_activate"
  2⤵
  PID:3352
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=454 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_tm_unchanged"
  2⤵
  PID:5648
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=455 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_tm_mov_cr3"
  2⤵
  PID:1552
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=456 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_tm_paging_width"
  2⤵
  PID:1968
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=457 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_tm_width_bounds"
  2⤵
  PID:3992
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=458 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_tm_pae_pdpte"
  2⤵
  PID:2568
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=459 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_tm_apic_base"
  2⤵
  PID:2200
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=460 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_tm_mtrr"
  2⤵
  PID:2004
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=461 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_tm_pconfig"
  2⤵
  PID:2032
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=462 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ti_vmx_ptr"
  2⤵
  PID:4732
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=463 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ti_vmx_entry"
  2⤵
  PID:5972
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=464 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ti_ept_entries"
  2⤵
  PID:4696
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=465 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ti_ept_guest_width"
  2⤵
  PID:5516
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=466 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_i6_ext_matrix64"
  2⤵
  PID:4260
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=467 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_i6_dpl64"
  2⤵
  PID:4532
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=468 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_i6_cs_mode64"
  2⤵
  PID:4124
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=469 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_i6_cs_sel64"
  2⤵
  PID:3640
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=470 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_i6_gate_rip64"
  2⤵
  PID:3564
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=471 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ig2_gate_rip_bounds64"
  2⤵
  PID:2628
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=472 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ig2_gate_rip_order64"
  2⤵
  PID:5464
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=473 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ig2_gate_rip_paging64"
  2⤵
  PID:5732
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=474 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ig2_gate_rip_cet64"
  2⤵
  PID:3500
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=475 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ig2_gate_rip_compat64"
  2⤵
  PID:4860
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=476 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ig2_gate_rip_vmx64"
  2⤵
  PID:4856
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=477 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ig2_gate_rip_tlbvirt64"
  2⤵
  PID:2232
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=478 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_idterr_gate16_64"
  2⤵
  PID:3328
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=479 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_idterr_gate_types64"
  2⤵
  PID:5668
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=480 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ig3_frame_cross64"
  2⤵
  PID:984
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=481 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ig3_frame_cross_paging64"
  2⤵
  PID:6004
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=482 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ig3_frame_cross_df64"
  2⤵
  PID:2340
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=483 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ig3_frame_cross_order64"
  2⤵
  PID:1864
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=484 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ig3_frame_cross_la57_64"
  2⤵
  PID:1680
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=485 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ig3_frame_cross_vmx64"
  2⤵
  PID:3300
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=486 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ig3_frame_cross_tlbvirt64"
  2⤵
  PID:1720
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=487 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ig3_int1_rip64"
  2⤵
  PID:3552
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=488 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ig3_int1_unchanged64"
  2⤵
  PID:2900
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=489 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ig3_int1_fred64"
  2⤵
  PID:716
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=490 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ig3_int1_vmx64"
  2⤵
  PID:5044
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=491 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ig3_int1_legacy32"
  2⤵
  PID:5972
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=492 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xc_default_xcr0_models"
  2⤵
  PID:3240
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=493 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xc_arch_reset_vs_default"
  2⤵
  PID:3292
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=494 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xc_strict_off_keeps_xcr0"
  2⤵
  PID:4500
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=495 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_um_remap_stale_tb"
  2⤵
  PID:3140
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=496 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_um_unrelated_kept"
  2⤵
  PID:5520
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=497 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_uc_mc_trigger"
  2⤵
  PID:5012
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=498 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_uc_mc_privilege"
  2⤵
  PID:5560
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=499 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_uc_mc_sign_id"
  2⤵
  PID:256
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=500 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_uc_mc_profiles"
  2⤵
  PID:4304
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=501 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_smr_entry_state"
  2⤵
  PID:5684
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=502 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_smr_latched"
  2⤵
  PID:4756
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=503 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_smr_io_boundary"
  2⤵
  PID:248
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=504 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_smr_intel64_map"
  2⤵
  PID:4680
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=505 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_smr_intel64_rsm"
  2⤵
  PID:4212
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=506 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_smr_intel64_cet"
  2⤵
  PID:4972
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=507 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_smr_intel64_io"
  2⤵
  PID:3712
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=508 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_smr_intel64_halt"
  2⤵
  PID:1868
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=509 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_smr_intel32_map"
  2⤵
  PID:4332
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=510 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_smr_amd64_map"
  2⤵
  PID:4232
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=511 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_smr_amd64_rsm"
  2⤵
  PID:3224
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=512 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_smr_vendor"
  2⤵
  PID:5152
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=513 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_smr_revision_profiles"
  2⤵
  PID:1064
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=514 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xu_pcore_default"
  2⤵
  PID:2216
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=515 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xu_pcore"
  2⤵
  PID:3412
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=516 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xu_ecore"
  2⤵
  PID:1776
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=517 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xu_always"
  2⤵
  PID:2880
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=518 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xu_amd_unchanged"
  2⤵
  PID:1620
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=519 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xu_ctl"
  2⤵
  PID:4624
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=520 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xu_rules"
  2⤵
  PID:2092
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=521 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xu_mxcsr_xsave"
  2⤵
  PID:5860
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=522 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xu_context"
  2⤵
  PID:6088
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=523 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xz_reset_guest"
  2⤵
  PID:944
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=524 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xz_reset_host"
  2⤵
  PID:1004
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=525 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xz_sizes_follow"
  2⤵
  PID:3500
- C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-20_18064ee82d117a2751936ec9f145f9b0_coinminer_icedid_luca-stealer_njrat.exe --worker=526 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xz_derive_rules"
  2⤵
  PID:4752

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1968-5-0x000002780C000000-0x000002780C001000-memory.dmp

Download

memory/2336-2-0x0000028C6F910000-0x0000028C6F911000-memory.dmp

Download

memory/2336-7-0x0000028C00000000-0x0000028C00400000-memory.dmp

Download

memory/2456-3-0x0000019B80000000-0x0000019B80400000-memory.dmp

Download

memory/2456-8-0x0000019B80000000-0x0000019B80400000-memory.dmp

Download

memory/2696-4-0x0000015DF2F60000-0x0000015DF2F61000-memory.dmp

Download

memory/4364-0-0x0000029880300000-0x0000029880301000-memory.dmp

Download

memory/4364-1-0x00000298804A0000-0x00000298808A0000-memory.dmp

Download

memory/4764-6-0x00000282B87D0000-0x00000282B87D1000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads