40268d691ba27180d0d39e3283779d6e8a18d6393d7c64cacea0a599f5829299

Analysis

max time kernel
148s
max time network
142s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
27/10/2026, 16:40

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
Size 4.6MB
Sample261027-t6rc8avyes
SHA256 40268d691ba27180d0d39e3283779d6e8a18d6393d7c64cacea0a599f5829299
MD5 5abce7534cb46ff8dc8c1ea4f7609054
SHA1 a2ae83e1bf61b6dd5aa11ab388e2b4dfdc561b96
SHA512 d50e919f9a633d0d1cecaab2aa877aa425bd3000bf1e9dda58a4b4cc6fb29f50641f7c89fbc5bed3e06437557ac9714674b15377c3b173f244609523904585b4
SSDEEP 49152:UsewBeanPIsUHeVEU1DEvc1q/F+3kfaAl13cLmBfMWo89T/u0gYkaiNIoNGWwxhf:mED0IkfncGfPHxEdYKVEOyxj
TLSH
T17E263940B7A204C4CD2A917C9723F579F2B1F8450BF09AD742A602796F3ABD55C36F2A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 2 IoCs

Adversaries may check for Internet connectivity on compromised systems.

discovery

Internet Connection Discovery

T1016.001

pid	Process
3588	2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
5128	2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3268 wrote to memory of 3400	3268	2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe	90
PID 3268 wrote to memory of 3436	3268	2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe	91
PID 3268 wrote to memory of 1644	3268	2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe	92
PID 3268 wrote to memory of 2392	3268	2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe	93
PID 3268 wrote to memory of 4692	3268	2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe	94
PID 3268 wrote to memory of 2596	3268	2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe	95
PID 3268 wrote to memory of 5116	3268	2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe	96
PID 3268 wrote to memory of 4112	3268	2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe	97
PID 3268 wrote to memory of 4164	3268	2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe	98
PID 3268 wrote to memory of 2216	3268	2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe	99
PID 3268 wrote to memory of 4852	3268	2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe	100
PID 3268 wrote to memory of 3776	3268	2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe	101
PID 3268 wrote to memory of 472	3268	2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe	102
PID 3268 wrote to memory of 4136	3268	2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe	103
PID 3268 wrote to memory of 6068	3268	2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe	104
PID 3268 wrote to memory of 4592	3268	2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe	105
PID 3268 wrote to memory of 4564	3268	2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe	106
PID 3268 wrote to memory of 4420	3268	2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe	107
PID 3268 wrote to memory of 3300	3268	2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe	108
PID 3268 wrote to memory of 3108	3268	2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe	109
PID 3268 wrote to memory of 3060	3268	2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe	110
PID 3268 wrote to memory of 4508	3268	2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe	111
PID 3268 wrote to memory of 260	3268	2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe	112
PID 3268 wrote to memory of 6072	3268	2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe	113
PID 3268 wrote to memory of 4988	3268	2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe	114
PID 3268 wrote to memory of 5028	3268	2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe	115
PID 3268 wrote to memory of 4324	3268	2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe	116
PID 3268 wrote to memory of 1896	3268	2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe	117
PID 3268 wrote to memory of 5784	3268	2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe	118
PID 3268 wrote to memory of 5964	3268	2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe	119
PID 3268 wrote to memory of 5588	3268	2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe	120
PID 3268 wrote to memory of 4068	3268	2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe	121
PID 3268 wrote to memory of 4116	3268	2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe	122
PID 3268 wrote to memory of 120	3268	2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe	123
PID 3268 wrote to memory of 2824	3268	2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe	124
PID 3268 wrote to memory of 1224	3268	2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe	125
PID 3268 wrote to memory of 4364	3268	2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe	126
PID 3268 wrote to memory of 3412	3268	2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe	127
PID 3268 wrote to memory of 2608	3268	2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe	128
PID 3268 wrote to memory of 4432	3268	2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe	129
PID 3268 wrote to memory of 1036	3268	2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe	130
PID 3268 wrote to memory of 4732	3268	2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe	131
PID 3268 wrote to memory of 992	3268	2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe	132
PID 3268 wrote to memory of 1624	3268	2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe	133
PID 3268 wrote to memory of 4672	3268	2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe	134
PID 3268 wrote to memory of 5308	3268	2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe	135
PID 3268 wrote to memory of 5476	3268	2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe	136
PID 3268 wrote to memory of 3524	3268	2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe	137
PID 3268 wrote to memory of 1880	3268	2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe	138
PID 3268 wrote to memory of 3008	3268	2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe	139
PID 3268 wrote to memory of 1656	3268	2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe	140
PID 3268 wrote to memory of 2492	3268	2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe	141
PID 3268 wrote to memory of 2788	3268	2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe	142
PID 3268 wrote to memory of 1608	3268	2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe	143
PID 3268 wrote to memory of 240	3268	2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe	144
PID 3268 wrote to memory of 1824	3268	2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe	145
PID 3268 wrote to memory of 1140	3268	2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe	146
PID 3268 wrote to memory of 1708	3268	2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe	147
PID 3268 wrote to memory of 6092	3268	2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe	148
PID 3268 wrote to memory of 1096	3268	2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe	149
PID 3268 wrote to memory of 4344	3268	2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe	150
PID 3268 wrote to memory of 6064	3268	2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe	151
PID 3268 wrote to memory of 4056	3268	2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe	152
PID 3268 wrote to memory of 2696	3268	2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe	153

C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3268
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=0 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_in"
  2⤵
  PID:3400
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=1 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_out"
  2⤵
  PID:3436
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=2 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_mem_hook_all"
  2⤵
  PID:1644
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=3 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_inc_dec_pxor"
  2⤵
  PID:2392
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=4 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_avx_vpxor_ymm"
  2⤵
  PID:4692
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=5 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_avx_vex128_zero_upper"
  2⤵
  PID:2596
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=6 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_avx_scalar_zero_upper"
  2⤵
  PID:5116
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=7 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_avx_fma_ps"
  2⤵
  PID:4112
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=8 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fma_scalar_variants"
  2⤵
  PID:4164
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=9 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_avx2_broadcast_permute"
  2⤵
  PID:2216
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=10 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_avx2_variable_shifts"
  2⤵
  PID:4852
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=11 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_avx2_mask_gather"
  2⤵
  PID:3776
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=12 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_avx_vzeroall"
  2⤵
  PID:472
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=13 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_aes_pclmul"
  2⤵
  PID:4136
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=14 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_avx512_tcg_mask"
  2⤵
  PID:6068
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=15 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vaes_vex_gating"
  2⤵
  PID:4592
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=16 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vpclmulqdq_tcg_mask"
  2⤵
  PID:4564
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=17 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vnni_ifma_ne_cpuid"
  2⤵
  PID:4420
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=18 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vnni_ifma_ne_vectors"
  2⤵
  PID:3300
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=19 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vnni_ifma_ne_ud"
  2⤵
  PID:3108
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=20 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ptwrite_ud"
  2⤵
  PID:3060
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=21 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vsha512"
  2⤵
  PID:4508
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=22 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vsm3"
  2⤵
  PID:260
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=23 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vsm4"
  2⤵
  PID:6072
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=24 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_tsx_rtm_always_abort"
  2⤵
  PID:4988
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=25 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_relative_jump"
  2⤵
  PID:5028
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=26 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_loop"
  2⤵
  PID:4324
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=27 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_invalid_mem_read"
  2⤵
  PID:1896
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=28 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_invalid_mem_write"
  2⤵
  PID:5784
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=29 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_invalid_jump"
  2⤵
  PID:5964
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=30 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_64_syscall"
  2⤵
  PID:5588
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=31 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_16_add"
  2⤵
  PID:4068
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=32 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_reg_save"
  2⤵
  PID:4116
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=33 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_invalid_mem_read_stop_in_cb"
  2⤵
  PID:120
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=34 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_x87_fnstenv"
  2⤵
  PID:2824
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=35 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_mmio"
  2⤵
  PID:1224
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=36 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_missing_code"
  2⤵
  PID:4364
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=37 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_smc_xor"
  2⤵
  PID:3412
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=38 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_smc_add"
  2⤵
  PID:2608
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=39 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_smc_mem_hook"
  2⤵
  PID:4432
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=40 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_mmio_uc_mem_rw"
  2⤵
  PID:1036
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=41 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sysenter"
  2⤵
  PID:4732
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=42 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_hook_cpuid"
  2⤵
  PID:992
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=43 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_486_cpuid"
  2⤵
  PID:1624
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=44 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_qemu72_xsave_cpuid"
  2⤵
  PID:4672
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=45 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_opmask_registers"
  2⤵
  PID:5308
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=46 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_qemu72_msr_state"
  2⤵
  PID:5476
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=47 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_clear_tb_cache"
  2⤵
  PID:3524
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=48 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_clear_empty_tb"
  2⤵
  PID:1880
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=49 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_self_linked_tb_guest_smc"
  2⤵
  PID:3008
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=50 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_two_page_tb_invalidation"
  2⤵
  PID:1656
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=51 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_tb_cache_engine_isolation"
  2⤵
  PID:2492
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=52 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_hook_tcg_op"
  2⤵
  PID:2788
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=53 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_cmpxchg"
  2⤵
  PID:1608
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=54 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_cmpxchg32_accumulator"
  2⤵
  PID:240
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=55 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_cmpxchg32_register"
  2⤵
  PID:1824
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=56 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ret_imm16_unsigned"
  2⤵
  PID:1140
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=57 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_rorx_rip_relative_imm"
  2⤵
  PID:1708
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=58 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_shld_rip_relative_imm"
  2⤵
  PID:6092
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=59 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_shrd_rip_relative_imm"
  2⤵
  PID:1096
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=60 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_pdep32_zero_extend"
  2⤵
  PID:4344
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=61 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_pext32_zero_extend"
  2⤵
  PID:6064
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=62 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_nested_emu_start"
  2⤵
  PID:4056
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=63 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_nested_emu_stop"
  2⤵
  PID:2696
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=64 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_64_nested_emu_start_error"
  2⤵
  PID:2488
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=65 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_eflags_reserved_bit"
  2⤵
  PID:4264
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=66 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_blsi_cf"
  2⤵
  PID:5928
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=67 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_blsr_flags"
  2⤵
  PID:2940
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=68 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_blsmsk_flags"
  2⤵
  PID:4752
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=69 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_bzhi_index_boundary"
  2⤵
  PID:696
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=70 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_nested_uc_emu_start_exits"
  2⤵
  PID:5844
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=71 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_clear_count_cache"
  2⤵
  PID:3320
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=72 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_correct_address_in_small_jump_hook"
  2⤵
  PID:4768
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=73 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_correct_address_in_long_jump_hook"
  2⤵
  PID:932
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=74 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_invalid_vex_l"
  2⤵
  PID:5576
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=75 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sse_aligned_access"
  2⤵
  PID:3932
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=76 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_data_watchpoint"
  2⤵
  PID:4856
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=77 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_lazy_mapping"
  2⤵
  - System Network Configuration Discovery: Internet Connection Discovery
  PID:3588
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=78 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_16_incorrect_ip"
  2⤵
  PID:3164
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=79 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_mmu"
  2⤵
  PID:1268
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=80 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_read_virtual"
  2⤵
  PID:1572
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=81 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vtlb"
  2⤵
  PID:5876
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=82 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_segmentation"
  2⤵
  PID:5076
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=83 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_0xff_lcall"
  2⤵
  PID:4876
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=84 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_64_not_overwriting_tmp0_for_pc_update"
  2⤵
  PID:2744
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=85 --no-exec --no-summary --verbose=2 --color=always -- "test_fxsave_fpip_x86"
  2⤵
  PID:2648
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=86 --no-exec --no-summary --verbose=2 --color=always -- "test_fxsave_fpip_x64"
  2⤵
  PID:4728
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=87 --no-exec --no-summary --verbose=2 --color=always -- "test_bswap_x64"
  2⤵
  PID:4204
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=88 --no-exec --no-summary --verbose=2 --color=always -- "test_rex_x64"
  2⤵
  PID:5624
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=89 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ro_segfault"
  2⤵
  PID:3520
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=90 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vpermilps_null_ptr_call"
  2⤵
  PID:4640
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=91 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_hook_insn_rdtsc"
  2⤵
  PID:5532
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=92 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_hook_insn_rdtscp"
  2⤵
  PID:5992
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=93 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_hook_insn_wrmsr"
  2⤵
  PID:5812
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=94 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_hook_insn_rdmsr"
  2⤵
  PID:5716
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=95 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_dr7"
  2⤵
  PID:4408
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=96 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_hook_block"
  2⤵
  PID:1000
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=97 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_mem_hooks_pc_guarantee"
  2⤵
  PID:984
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=98 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_aaa_flags"
  2⤵
  PID:5984
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=99 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_aas_flags"
  2⤵
  PID:5328
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=100 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_group_1a"
  2⤵
  PID:1944
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=101 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_lock_bt_mem"
  2⤵
  PID:3720
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=102 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_lock_bt_reg"
  2⤵
  PID:4968
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=103 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_lock_btc_mem"
  2⤵
  PID:2716
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=104 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_lock_btc_reg"
  2⤵
  PID:3196
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=105 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_avx512_optin"
  2⤵
  PID:2860
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=106 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_avx512_xsetbv"
  2⤵
  PID:1492
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=107 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_zmm_api_32"
  2⤵
  PID:5340
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=108 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_avx512_xsave"
  2⤵
  PID:5244
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=109 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_avx512_xsavec"
  2⤵
  PID:5360
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=110 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_avx512_xsave_32"
  2⤵
  PID:4980
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=111 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_avx512_cpuid"
  2⤵
  PID:4176
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=112 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vex_zero_maxvl"
  2⤵
  PID:5260
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=113 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_keylocker_cpuid"
  2⤵
  PID:4960
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=114 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_keylocker_zero_iwkey_vector"
  2⤵
  PID:2676
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=115 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_keylocker_aes128"
  2⤵
  PID:5632
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=116 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_keylocker_wide256"
  2⤵
  PID:1532
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=117 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_keylocker_faults"
  2⤵
  PID:1592
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=118 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_keylocker_cpl3"
  2⤵
  PID:6116
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=119 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_rao_int"
  2⤵
  PID:2752
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=120 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_movrs_prefetchrst2"
  2⤵
  PID:5280
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=121 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_user_msr"
  2⤵
  PID:3400
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=122 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_uintr_uif"
  2⤵
  PID:2848
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=123 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_uintr_senduipi"
  2⤵
  PID:3952
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=124 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_uintr_delivery"
  2⤵
  PID:1184
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=125 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_waitpkg"
  2⤵
  PID:5720
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=126 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_wp_tsc_adjust"
  2⤵
  PID:3752
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=127 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_wp_profiles"
  2⤵
  PID:4628
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=128 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_tw_deadline"
  2⤵
  PID:3012
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=129 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_tw_os_limit"
  2⤵
  PID:2280
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=130 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_tw_wrap"
  2⤵
  PID:960
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=131 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_tw_monitor"
  2⤵
  PID:3636
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=132 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_tw_tsc_adjust"
  2⤵
  PID:4220
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=133 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_tw_wake"
  2⤵
  PID:3352
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=134 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ta_enum"
  2⤵
  PID:1192
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=135 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ta_adjust_moves_tsc"
  2⤵
  PID:4136
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=136 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ta_tsc_write"
  2⤵
  PID:6068
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=137 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ta_wait"
  2⤵
  PID:1772
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=138 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ta_vmx"
  2⤵
  PID:4564
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=139 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_enqcmd"
  2⤵
  PID:3300
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=140 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_smx_pconfig_sgx"
  2⤵
  PID:3108
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=141 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_cet_shadow_stack"
  2⤵
  PID:3060
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=142 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_cet_shadow_stack_32"
  2⤵
  PID:3176
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=143 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_cet_call_ret"
  2⤵
  PID:52
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=144 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_cet_ibt"
  2⤵
  PID:6072
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=145 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_cet_shadow_stack_paging"
  2⤵
  PID:4988
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=146 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_cet2_far_call_ret"
  2⤵
  PID:5028
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=147 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_cet2_call_gate"
  2⤵
  PID:5356
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=148 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_cet2_iret"
  2⤵
  PID:1896
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=149 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_cet2_iret_vm86"
  2⤵
  PID:5784
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=150 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_cet2_sysret_sysexit"
  2⤵
  PID:5964
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=151 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_cet2_task_switch"
  2⤵
  PID:5740
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=152 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_cet2_xsaves"
  2⤵
  PID:5724
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=153 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_cet2_endbr_rex2"
  2⤵
  PID:2036
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=154 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_opmask_optin"
  2⤵
  PID:3744
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=155 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_opmask_vectors"
  2⤵
  PID:4292
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=156 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_opmask_ud"
  2⤵
  PID:4364
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=157 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_opmask_features"
  2⤵
  PID:3548
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=158 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_opmask_state"
  2⤵
  PID:4432
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=159 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_lock_hint_nops"
  2⤵
  PID:3372
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=160 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_mpx_modrm_length"
  2⤵
  PID:3140
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=161 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vex_b_32"
  2⤵
  PID:5752
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=162 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_mem_write_invalidates_tb"
  2⤵
  PID:5800
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=163 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_amx_optin"
  2⤵
  PID:1240
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=164 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_amx_xsetbv"
  2⤵
  PID:3428
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=165 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_amx_api"
  2⤵
  PID:4428
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=166 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_amx_cfg_insns"
  2⤵
  PID:3064
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=167 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_amx_load_store"
  2⤵
  PID:3708
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=168 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_amx_tmul_vectors"
  2⤵
  PID:4840
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=169 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_amx_exceptions"
  2⤵
  PID:4828
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=170 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_amx_xsave"
  2⤵
  PID:1980
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=171 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_amx_xfd"
  2⤵
  PID:5948
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=172 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_evex_routing"
  2⤵
  PID:2972
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=173 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_evex_32bit_fields"
  2⤵
  PID:2580
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=174 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_evex_state"
  2⤵
  PID:2452
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=175 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_evex_masked_memory"
  2⤵
  PID:4780
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=176 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_evex_riprel"
  2⤵
  PID:2008
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=177 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_evex_gather_restart"
  2⤵
  PID:3360
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=178 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_evex_gather_hooks"
  2⤵
  PID:2376
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=179 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_evex_scatter_restart"
  2⤵
  PID:2100
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=180 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_evex_scatter_order"
  2⤵
  PID:1280
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=181 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_evex_vsib_modes"
  2⤵
  PID:4764
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=182 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_evex_scalar_memory"
  2⤵
  PID:3528
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=183 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_evex_comis_eflags"
  2⤵
  PID:2940
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=184 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_evex_m2_memory"
  2⤵
  PID:1196
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=185 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_evex_m2_features"
  2⤵
  PID:5872
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=186 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_evex_bw_cpuid"
  2⤵
  PID:2308
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=187 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_evex_bw_masked_bytes"
  2⤵
  PID:3292
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=188 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_evex_bw_kmask64"
  2⤵
  PID:5844
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=189 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_avx512dq_gating"
  2⤵
  PID:4768
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=190 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_avx512dq_values"
  2⤵
  PID:932
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=191 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_avx512cd_optin"
  2⤵
  PID:5576
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=192 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_avx512cd_gating"
  2⤵
  PID:3932
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=193 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_avx512_m4_bits"
  2⤵
  PID:4572
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=194 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_evex_cvt_narrow"
  2⤵
  PID:3588
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=195 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_evex_cvt_ph_store"
  2⤵
  PID:3164
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=196 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_evex_cvt_scalar_merge"
  2⤵
  PID:2264
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=197 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_evex_cvt_gpr_w"
  2⤵
  PID:1268
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=198 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_evex_cvt_xm"
  2⤵
  PID:5876
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=199 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_f16c_vcvtps2ph_ftz"
  2⤵
  PID:5076
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=200 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sdm_documented_deviations"
  2⤵
  PID:4876
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=201 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fp16_optin"
  2⤵
  PID:2744
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=202 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fp16_gating"
  2⤵
  PID:2648
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=203 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fp16_xm"
  2⤵
  PID:4728
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=204 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fp16_complex"
  2⤵
  PID:4204
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=205 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fp16_cvt_gpr"
  2⤵
  PID:5624
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=206 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_avx10_optin"
  2⤵
  PID:3624
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=207 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_avx10_gating"
  2⤵
  PID:3796
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=208 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_avx10_2_gating"
  2⤵
  PID:4640
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=209 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_avx10b_ctl"
  2⤵
  PID:5532
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=210 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_avx10b_gating"
  2⤵
  PID:5992
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=211 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_avx10b_values"
  2⤵
  PID:2708
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=212 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_avx10b_fault_suppression"
  2⤵
  PID:4412
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=213 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vx_avx10_cpuid"
  2⤵
  PID:5584
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=214 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vx_v2aux_ctl"
  2⤵
  PID:3472
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=215 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vx_salc_udb"
  2⤵
  PID:3040
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=216 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sse_unmasked_ou"
  2⤵
  PID:5560
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=217 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sse_dpps_steps"
  2⤵
  PID:4380
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=218 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_mxcsr_api"
  2⤵
  PID:5820
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=219 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_cpuid_strict_default"
  2⤵
  PID:4384
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=220 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_bp_tcg_temp_overflow"
  2⤵
  PID:4664
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=221 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_bp_iret_vm86"
  2⤵
  PID:4588
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=222 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_bp_rdpmc_gp"
  2⤵
  PID:6124
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=223 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_bp_vex_vvvv3_32"
  2⤵
  PID:4336
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=224 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_bp_lock_new_decoder"
  2⤵
  PID:4196
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=225 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_bp_lock_old_decoder"
  2⤵
  PID:5484
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=226 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_bp_pause_tf"
  2⤵
  PID:4356
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=227 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_bp_ss_sti_tf"
  2⤵
  PID:1212
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=228 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_bp_syscall_modes"
  2⤵
  PID:2132
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=229 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_bp_mov_dr"
  2⤵
  PID:5528
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=230 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_bp_dr7_gd"
  2⤵
  PID:2124
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=231 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_bp_tss16_selectors"
  2⤵
  PID:3876
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=232 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_bp_tss16_gpr_upper"
  2⤵
  PID:2676
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=233 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_bp_tss_save_old_format"
  2⤵
  PID:5632
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=234 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_bp_cs_base_fetch"
  2⤵
  PID:1532
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=235 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_bp_canonical_ss_cs_base"
  2⤵
  PID:2956
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=236 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_m4b_vp2i_optin"
  2⤵
  PID:4648
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=237 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_m4b_vp2i_gating"
  2⤵
  PID:5788
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=238 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_m4b_evex_gating"
  2⤵
  PID:5292
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=239 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_m4a_optin"
  2⤵
  PID:4252
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=240 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_m4a_gating"
  2⤵
  PID:5444
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=241 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_m4a_values"
  2⤵
  PID:5840
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=242 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_f2_lss_rexw"
  2⤵
  PID:3436
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=243 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_f2_stack64"
  2⤵
  PID:5960
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=244 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_f2_store_no_partial"
  2⤵
  PID:1232
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=245 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_f2_store_no_partial_paging"
  2⤵
  PID:4692
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=246 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_f2_maxphyaddr"
  2⤵
  PID:1520
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=247 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_f2_syscall_sce"
  2⤵
  PID:3068
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=248 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_f2_rdpmc"
  2⤵
  PID:3328
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=249 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_apx_optin"
  2⤵
  PID:3104
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=250 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_apx_regs"
  2⤵
  PID:960
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=251 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_apx_xsave"
  2⤵
  PID:1252
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=252 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_apx_gating"
  2⤵
  PID:4220
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=253 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_apx_rex2_decode"
  2⤵
  PID:5460
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=254 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_apx_evex"
  2⤵
  PID:5680
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=255 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ax4_decode"
  2⤵
  PID:4892
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=256 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ax4_gating"
  2⤵
  PID:5060
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=257 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ax4_jmpabs"
  2⤵
  PID:4288
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=258 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ax4_user_msr"
  2⤵
  PID:5908
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=259 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_amx2_optin"
  2⤵
  PID:4808
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=260 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_amx2_exceptions"
  2⤵
  PID:4564
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=261 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_amx2_values"
  2⤵
  PID:4228
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=262 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_amx2_xsaves"
  2⤵
  PID:6104
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=263 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx3_flags_at_fault"
  2⤵
  PID:4244
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=264 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx3_flags_mem_hook"
  2⤵
  PID:2420
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=265 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx3_enter"
  2⤵
  PID:3084
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=266 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx3_far_limits"
  2⤵
  PID:4232
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=267 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx3_far_call_pushes"
  2⤵
  PID:5804
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=268 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx3_cmpxchg_ro"
  2⤵
  PID:4324
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=269 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx3_vsib_pending_db"
  2⤵
  PID:4976
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=270 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_axc_wrss_paging"
  2⤵
  PID:5744
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=271 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_axc_evex_r4_kreg"
  2⤵
  PID:5964
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=272 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_axc_apx_nci_ndd_nf"
  2⤵
  PID:5740
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=273 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xm_x87_ptr_profiles"
  2⤵
  PID:120
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=274 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xm_scatter_write_hook"
  2⤵
  PID:2036
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=275 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_rg_mmx_regs"
  2⤵
  PID:3744
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=276 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_rg_pkru"
  2⤵
  PID:4492
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=277 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_rg_context_roundtrip"
  2⤵
  PID:1804
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=278 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_rg_context_reg_write"
  2⤵
  PID:1248
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=279 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_rg_context_tlb"
  2⤵
  PID:2608
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=280 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_rg_cpuid_0d1_ebx"
  2⤵
  PID:3592
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=281 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_rg_rdrand_seeded"
  2⤵
  PID:4308
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=282 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_rg_rdrand_context"
  2⤵
  PID:1624
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=283 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_rg_rdrand_host"
  2⤵
  PID:4632
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=284 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_rg_ac_conditions"
  2⤵
  PID:2060
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=285 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_rg_ac_helpers"
  2⤵
  PID:5476
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=286 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx4_exc_record"
  2⤵
  PID:1080
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=287 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx4_far_limits_gp0"
  2⤵
  PID:3428
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=288 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx4_selector_codes"
  2⤵
  PID:4428
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=289 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx4_ss0"
  2⤵
  PID:3064
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=290 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx4_pf_codes"
  2⤵
  PID:2788
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=291 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx4_cp_codes"
  2⤵
  PID:3784
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=292 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx4_ts"
  2⤵
  PID:4212
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=293 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx4_cr2_probe"
  2⤵
  PID:240
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=294 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx4_rep_cmps_restore"
  2⤵
  PID:2044
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=295 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx4_hook_flags"
  2⤵
  PID:4548
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=296 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx4_store_stop"
  2⤵
  PID:4896
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=297 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx4_store_prepare"
  2⤵
  PID:4612
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=298 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx4_store_evex"
  2⤵
  PID:4872
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=299 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx4_store_partial"
  2⤵
  PID:1620
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=300 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx4_call_ss_pf"
  2⤵
  PID:3144
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=301 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx4_store_amx"
  2⤵
  PID:3360
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=302 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx4_mpx_bndcfg"
  2⤵
  PID:2092
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=303 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx4_mpx_bndcfg_load"
  2⤵
  PID:4596
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=304 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx4_hook_flags_apx"
  2⤵
  PID:5936
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=305 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_si_vpmov_dq"
  2⤵
  PID:468
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=306 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_si_wrmsrns"
  2⤵
  PID:5900
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=307 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_si_msrlist"
  2⤵
  PID:1908
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=308 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_si_msr_imm"
  2⤵
  PID:2940
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=309 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_si_hreset"
  2⤵
  PID:1196
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=310 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_si_lkgs"
  2⤵
  PID:5872
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=311 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_si_invpcid"
  2⤵
  PID:5432
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=312 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_si_pbndkb"
  2⤵
  PID:3732
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=313 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_pc_tme_msrs"
  2⤵
  PID:3096
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=314 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_pc_pconfig"
  2⤵
  PID:4512
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=315 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx5_probe_write_unmapped"
  2⤵
  PID:900
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=316 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx5_mstore_write_once"
  2⤵
  PID:5240
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=317 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx5_partial_reads"
  2⤵
  PID:4856
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=318 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx5_context_writes"
  2⤵
  PID:4496
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=319 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sm_sysenter_rip"
  2⤵
  PID:5208
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=320 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sm_syscall"
  2⤵
  PID:1572
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=321 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sm_syscall_cet"
  2⤵
  PID:712
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=322 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sm_sysenter"
  2⤵
  PID:5552
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=323 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sm_sysret_flags"
  2⤵
  PID:2728
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=324 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sm_sysexit"
  2⤵
  PID:2556
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=325 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sm_msr_present"
  2⤵
  PID:3420
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=326 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sm_msr_values"
  2⤵
  PID:2732
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=327 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sm_pmu"
  2⤵
  PID:3384
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=328 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xp_optin"
  2⤵
  PID:1512
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=329 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xp_4vnniw"
  2⤵
  PID:5044
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=330 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xp_4fmaps"
  2⤵
  PID:2792
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=331 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xp_pf"
  2⤵
  PID:5548
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=332 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xp_er"
  2⤵
  PID:4120
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=333 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ap_reset_state"
  2⤵
  PID:3228
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=334 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ap_base_transitions"
  2⤵
  PID:3656
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=335 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ap_tpr_cr8"
  2⤵
  PID:1752
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=336 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ap_self_ipi"
  2⤵
  PID:4616
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=337 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ap_priority_eoi"
  2⤵
  PID:5436
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=338 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ap_nmi"
  2⤵
  PID:1000
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=339 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ap_errors"
  2⤵
  PID:984
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=340 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ap_unsupported"
  2⤵
  PID:5328
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=341 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ap_no_hook"
  2⤵
  PID:1944
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=342 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ap_context"
  2⤵
  PID:3720
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=343 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ap_bus_api"
  2⤵
  PID:4968
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=344 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ap_cross_ipi"
  2⤵
  PID:2716
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=345 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ap_multi_vcpu"
  2⤵
  PID:3196
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=346 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ap_uintr_cross"
  2⤵
  PID:2860
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=347 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ap_uintr_if0"
  2⤵
  PID:1492
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=348 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ap_uintr_cross_delivery"
  2⤵
  PID:2140
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=349 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ap_idt_delivery"
  2⤵
  PID:5244
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=350 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_rc_rcp14_tables"
  2⤵
  PID:2800
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=351 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_rc_rsqrt14_tables"
  2⤵
  PID:4356
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=352 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_rc_scalar"
  2⤵
  PID:4176
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=353 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_rc_fp16"
  2⤵
  PID:1212
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=354 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_rc_bf16"
  2⤵
  PID:5528
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=355 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_rc_legacy"
  2⤵
  PID:2124
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=356 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_rc_bounds"
  2⤵
  PID:3876
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=357 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_amb2_rows"
  2⤵
  PID:2676
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=358 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_amb2_fp64_bound"
  2⤵
  PID:5632
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=359 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_amb2_tiny"
  2⤵
  PID:1532
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=360 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_amb2_exp2d_gap"
  2⤵
  PID:2472
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=361 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ig_tme_api"
  2⤵
  PID:4556
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=362 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ig_apic_api"
  2⤵
  PID:5304
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=363 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ig_context_msr"
  2⤵
  PID:6116
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=364 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ts_tse_optin"
  2⤵
  PID:2752
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=365 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ts_tse_key_program"
  2⤵
  PID:548
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=366 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ts_tse_wrapped"
  2⤵
  PID:3400
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=367 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ts_msr_api_refused"
  2⤵
  PID:2848
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=368 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ts_apic_profile"
  2⤵
  PID:3952
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=369 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ts_context_never_saved"
  2⤵
  PID:1184
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=370 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ts_itd"
  2⤵
  PID:5720
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=371 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_tf32_optin"
  2⤵
  PID:1520
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=372 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_tf32_exceptions"
  2⤵
  PID:4628
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=373 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_tf32_values"
  2⤵
  PID:4164
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=374 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_tsefix_cap_layout"
  2⤵
  PID:2216
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=375 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_tsefix_enc_alg"
  2⤵
  PID:2280
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=376 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_tsefix_reserved"
  2⤵
  PID:484
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=377 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xs_ts_nm"
  2⤵
  PID:472
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=378 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xs_ts_order"
  2⤵
  PID:4560
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=379 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xs_cpuid_hv_range"
  2⤵
  PID:4836
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=380 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xs_xgetbv1_profile"
  2⤵
  PID:1868
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=381 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fl_fred_enum"
  2⤵
  PID:6068
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=382 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fl_fred_deliver_cpl0"
  2⤵
  PID:4420
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=383 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fl_fred_stack_levels"
  2⤵
  PID:5424
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=384 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fl_fred_nested"
  2⤵
  PID:4884
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=385 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fl_fred_disallowed"
  2⤵
  PID:4144
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=386 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fl_erets"
  2⤵
  PID:3108
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=387 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fl_eretu_syscall"
  2⤵
  PID:364
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=388 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fl_erets_shadow"
  2⤵
  PID:3176
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=389 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fl_fred_far"
  2⤵
  PID:52
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=390 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fl_lam"
  2⤵
  PID:6072
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=391 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fl_lam_paging"
  2⤵
  PID:2560
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=392 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fl_eret_legacy"
  2⤵
  PID:5804
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=393 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_st_xsetbv_profile"
  2⤵
  PID:4324
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=394 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_st_nx_fetch"
  2⤵
  PID:4976
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=395 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_st_smc_remap"
  2⤵
  PID:5784
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=396 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_st_unmap_paging"
  2⤵
  PID:4068
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=397 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_st_reset_xcr0_profile"
  2⤵
  PID:4116
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=398 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sgx_cpuid"
  2⤵
  PID:4500
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=399 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sgx_platform_ctl"
  2⤵
  PID:1224
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=400 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sgx_msr"
  2⤵
  PID:808
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=401 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sgx_invd"
  2⤵
  PID:3048
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=402 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sgx_build_einit"
  2⤵
  PID:3564
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=403 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sgx_ecreate_eadd_checks"
  2⤵
  PID:2712
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=404 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sgx_encls_gates"
  2⤵
  PID:4532
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=405 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sgx_abort_page"
  2⤵
  PID:4372
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=406 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sgx_eremove_epa_eblock"
  2⤵
  PID:3908
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=407 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sgx_edbg"
  2⤵
  PID:5712
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=408 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sgx_eenter_eexit"
  2⤵
  PID:4948
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=409 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sgx_aex_eresume"
  2⤵
  PID:4148
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=410 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sgx_enclave_access"
  2⤵
  PID:3948
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=411 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sgx_enclave_debug"
  2⤵
  PID:3688
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=412 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sgx_ereport_egetkey"
  2⤵
  PID:3008
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=413 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sgx_ewb_eld"
  2⤵
  PID:2996
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=414 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sgx_sgx2"
  2⤵
  PID:1636
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=415 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_gs_smx"
  2⤵
  PID:3820
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=416 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sgx_xfrm_osxsave"
  2⤵
  PID:4828
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=417 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sgx_cet_ibt"
  2⤵
  PID:1980
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=418 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sgx_aex_delivery"
  2⤵
  PID:5948
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=419 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sgx_enclave32"
  2⤵
  PID:3080
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=420 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_idterr_vector64"
  2⤵
  PID:5644
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=421 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_idterr_ext64"
  2⤵
  PID:2888
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=422 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_idterr_cs64"
  2⤵
  PID:1096
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=423 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_optin"
  2⤵
  PID:4780
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=424 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_lifecycle"
  2⤵
  PID:2524
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=425 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_vmread_vmwrite"
  2⤵
  PID:4056
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=426 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_invept"
  2⤵
  PID:2376
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=427 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_entry_exit"
  2⤵
  PID:4576
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=428 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_nonroot_insn"
  2⤵
  PID:4108
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=429 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_inject"
  2⤵
  PID:1632
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=430 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_cr_dr"
  2⤵
  PID:4512
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=431 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_cond_exits"
  2⤵
  PID:4504
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=432 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_io_msr"
  2⤵
  PID:3420
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=433 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_exc_bitmap"
  2⤵
  PID:2792
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=434 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_intr_nmi"
  2⤵
  PID:1872
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=435 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_ept"
  2⤵
  PID:4616
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=436 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_apicv_tpr_x2apic"
  2⤵
  PID:3040
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=437 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_apicv_access"
  2⤵
  PID:5820
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=438 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_apicv_posted"
  2⤵
  PID:2716
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=439 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_fred"
  2⤵
  PID:432
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=440 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_pending_dbg"
  2⤵
  PID:4196
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=441 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_lam_cr3"
  2⤵
  PID:5244
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=442 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_prefix_root"
  2⤵
  PID:2660
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=443 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_prefix_guest"
  2⤵
  PID:2812
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=444 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_prefix_misc"
  2⤵
  PID:3672
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=445 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_encls"
  2⤵
  PID:3920
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=446 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_sgx_enc_events"
  2⤵
  PID:6068
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=447 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_sgx_exit"
  2⤵
  PID:4808
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=448 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_sgx_mtf"
  2⤵
  PID:4144
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=449 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_sgx_apic"
  2⤵
  PID:6104
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=450 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_exit_caps"
  2⤵
  PID:244
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=451 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_proc3"
  2⤵
  PID:5768
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=452 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_pdbg_save"
  2⤵
  PID:1896
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=453 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_mtf_tf"
  2⤵
  PID:4760
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=454 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_inj_len"
  2⤵
  PID:5964
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=455 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_ept_ve"
  2⤵
  PID:4316
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=456 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_mtf_tpr"
  2⤵
  PID:4364
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=457 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_ept_ve2"
  2⤵
  PID:1248
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=458 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_inj_len15"
  2⤵
  PID:4308
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=459 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_pdpte_tme"
  2⤵
  PID:3376
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=460 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_inj_df"
  2⤵
  PID:5668
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=461 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_ve_gpa48"
  2⤵
  PID:5308
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=462 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_host_cr3_tme"
  2⤵
  PID:1080
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=463 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_tx_optin"
  2⤵
  PID:1680
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=464 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_tx_seamrr"
  2⤵
  PID:2788
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=465 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_tx_insn"
  2⤵
  PID:3596
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=466 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_tm_activate"
  2⤵
  PID:3016
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=467 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_tm_unchanged"
  2⤵
  PID:2452
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=468 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_tm_mov_cr3"
  2⤵
  PID:4872
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=469 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_tm_paging_width"
  2⤵
  PID:2032
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=470 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_tm_width_bounds"
  2⤵
  PID:5924
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=471 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_tm_pae_pdpte"
  2⤵
  PID:4904
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=472 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_tm_apic_base"
  2⤵
  PID:1424
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=473 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_tm_mtrr"
  2⤵
  PID:2680
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=474 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_tm_pconfig"
  2⤵
  PID:3296
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=475 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ti_vmx_ptr"
  2⤵
  PID:6108
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=476 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ti_vmx_entry"
  2⤵
  PID:5904
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=477 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ti_ept_entries"
  2⤵
  PID:696
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=478 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ti_ept_guest_width"
  2⤵
  PID:5432
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=479 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_i6_ext_matrix64"
  2⤵
  PID:3096
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=480 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_i6_dpl64"
  2⤵
  PID:2828
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=481 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_i6_cs_mode64"
  2⤵
  PID:5576
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=482 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_i6_cs_sel64"
  2⤵
  PID:4572
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=483 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_i6_gate_rip64"
  2⤵
  PID:3588
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=484 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ig2_gate_rip_bounds64"
  2⤵
  PID:1432
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=485 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ig2_gate_rip_order64"
  2⤵
  PID:4640
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=486 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ig2_gate_rip_paging64"
  2⤵
  PID:5992
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=487 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ig2_gate_rip_cet64"
  2⤵
  PID:3040
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=488 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ig2_gate_rip_compat64"
  2⤵
  PID:5064
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=489 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ig2_gate_rip_vmx64"
  2⤵
  PID:432
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=490 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ig2_gate_rip_tlbvirt64"
  2⤵
  PID:4140
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=491 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_idterr_gate16_64"
  2⤵
  PID:4176
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=492 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_idterr_gate_types64"
  2⤵
  PID:1184
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=493 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ig3_frame_cross64"
  2⤵
  PID:5636
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=494 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ig3_frame_cross_paging64"
  2⤵
  PID:2712
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=495 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ig3_frame_cross_df64"
  2⤵
  PID:1880
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=496 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ig3_frame_cross_order64"
  2⤵
  PID:3008
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=497 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ig3_frame_cross_la57_64"
  2⤵
  PID:4212
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=498 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ig3_frame_cross_vmx64"
  2⤵
  PID:4548
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=499 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ig3_frame_cross_tlbvirt64"
  2⤵
  PID:5644
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=500 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ig3_int1_rip64"
  2⤵
  PID:4344
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=501 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ig3_int1_unchanged64"
  2⤵
  PID:468
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=502 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ig3_int1_fred64"
  2⤵
  PID:4596
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=503 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ig3_int1_vmx64"
  2⤵
  PID:1908
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=504 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ig3_int1_legacy32"
  2⤵
  PID:696
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=505 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xc_default_xcr0_models"
  2⤵
  PID:4092
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=506 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xc_arch_reset_vs_default"
  2⤵
  PID:5844
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=507 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xc_strict_off_keeps_xcr0"
  2⤵
  PID:932
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=508 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_um_remap_stale_tb"
  2⤵
  PID:1632
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=509 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_um_unrelated_kept"
  2⤵
  PID:2056
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=510 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sr_restore_stale_tb"
  2⤵
  PID:2700
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=511 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sr_restore_unmapped"
  2⤵
  PID:4676
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=512 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sr_remove_cache_pages"
  2⤵
  PID:4820
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=513 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sr_regions_contained"
  2⤵
  PID:4512
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=514 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sr_restore_new_mappings"
  2⤵
  - System Network Configuration Discovery: Internet Connection Discovery
  PID:5128
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=515 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sr_mmio_write_snapshot"
  2⤵
  PID:5184
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=516 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sr_map_ptr_host_changed"
  2⤵
  PID:4876
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=517 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sr_pt_ad_bits"
  2⤵
  PID:5148
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=518 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sr_restore_flatview"
  2⤵
  PID:3836
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=519 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_uc_mc_trigger"
  2⤵
  PID:672
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=520 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_uc_mc_privilege"
  2⤵
  PID:1704
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=521 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_uc_mc_sign_id"
  2⤵
  PID:2724
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=522 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_uc_mc_profiles"
  2⤵
  PID:3024
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=523 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_smr_entry_state"
  2⤵
  PID:3420
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=524 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_smr_latched"
  2⤵
  PID:2628
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=525 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_smr_io_boundary"
  2⤵
  PID:1576
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=526 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_smr_intel64_map"
  2⤵
  PID:2792
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=527 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_smr_intel64_rsm"
  2⤵
  PID:4480
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=528 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_smr_intel64_cet"
  2⤵
  PID:5716
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=529 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_smr_intel64_io"
  2⤵
  PID:5420
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=530 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_smr_intel64_halt"
  2⤵
  PID:3472
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=531 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_smr_intel32_map"
  2⤵
  PID:6004
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=532 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_smr_amd64_map"
  2⤵
  PID:3216
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=533 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_smr_amd64_rsm"
  2⤵
  PID:1628
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=534 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_smr_vendor"
  2⤵
  PID:5984
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=535 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_smr_revision_profiles"
  2⤵
  PID:3880
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=536 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_smr_dr_breakpoints"
  2⤵
  PID:1164
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=537 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xu_pcore_default"
  2⤵
  PID:4384
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=538 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xu_pcore"
  2⤵
  PID:1508
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=539 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xu_ecore"
  2⤵
  PID:616
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=540 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xu_always"
  2⤵
  PID:5020
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=541 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xu_amd_unchanged"
  2⤵
  PID:5820
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=542 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xu_ctl"
  2⤵
  PID:4196
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=543 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xu_rules"
  2⤵
  PID:5340
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=544 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xu_mxcsr_xsave"
  2⤵
  PID:5032
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=545 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xu_context"
  2⤵
  PID:4140
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=546 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xz_reset_guest"
  2⤵
  PID:1988
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=547 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xz_reset_host"
  2⤵
  PID:4960
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=548 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xz_sizes_follow"
  2⤵
  PID:4932
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=549 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xz_derive_rules"
  2⤵
  PID:700
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=550 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xq_profile_after_run"
  2⤵
  PID:720
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=551 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xq_profile_order"
  2⤵
  PID:5452
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=552 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xq_xss_wrmsr"
  2⤵
  PID:4720
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=553 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xq_xsaves_roundtrip"
  2⤵
  PID:4556
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=554 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xq_component_rules"
  2⤵
  PID:5304
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=555 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vpf_profiles"
  2⤵
  PID:6116
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=556 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vpf_profile_timing"
  2⤵
  PID:2752
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=557 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vpf_profile_off"
  2⤵
  PID:2760
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=558 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_pk_user_access"
  2⤵
  PID:548
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=559 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_pk_supervisor_access"
  2⤵
  PID:2848
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=560 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_pk_pks_cr4"
  2⤵
  PID:3952
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=561 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_pk_xrstor_rights"
  2⤵
  PID:5260
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=562 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_pk_modes"
  2⤵
  PID:5720
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=563 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_pk_msr35"
  2⤵
  PID:1520
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=564 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_cr4p_profiles"
  2⤵
  PID:4628
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=565 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_cr4p_each_bit"
  2⤵
  PID:4164
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=566 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_cr4p_off"
  2⤵
  PID:2216
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=567 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_efp_svme"
  2⤵
  PID:2280
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=568 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_efp_bits"
  2⤵
  PID:484
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=569 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_efp_narrow"
  2⤵
  PID:2812
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=570 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_efv_entry"
  2⤵
  PID:3672
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=571 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_efv_host"
  2⤵
  PID:1840
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=572 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_efv_msr_areas"
  2⤵
  PID:2140
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=573 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_efv_exit_reserved"
  2⤵
  PID:5032
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=574 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_pw_enum"
  2⤵
  PID:4932
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=575 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_pw_exec"
  2⤵
  PID:700
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=576 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_pw_cpl3"
  2⤵
  PID:720
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=577 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_pw_legacy_modes"
  2⤵
  PID:5452
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=578 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_pf_lock_mov_dr"
  2⤵
  PID:4720
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=579 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_pf_lock_mov_dr_vmx"
  2⤵
  PID:5292
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=580 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_pf_lar_limit_bits"
  2⤵
  PID:6116
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=581 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_pf_ss_chain_tf"
  2⤵
  PID:2752
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=582 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_pf_pcmpestr_w"
  2⤵
  PID:2760
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=583 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_dg_movss_ibp"
  2⤵
  PID:548
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=584 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_dg_movss_dbp"
  2⤵
  PID:1232
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=585 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_dg_ss_dr6"
  2⤵
  PID:4176
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=586 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_dg_rf_once"
  2⤵
  PID:4112
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=587 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_dg_rmw_w"
  2⤵
  PID:3012
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=588 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_dg_rf_push"
  2⤵
  PID:5640
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=589 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_dff_one_db"
  2⤵
  PID:5888
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=590 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_gr_efer_lma_write"
  2⤵
  PID:5368
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=591 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_gr_pk_shadow_stack"
  2⤵
  PID:956
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=592 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_gr_int_n_cpl3"
  2⤵
  PID:5896
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=593 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fb_wruss_ordinary_page"
  2⤵
  PID:4220
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=594 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_hx_lock_priv"
  2⤵
  PID:4836
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=595 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_hx_umwait_disarm"
  2⤵
  PID:4136
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=596 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_hx_vcvtps2ph_fault"
  2⤵
  PID:5060
- C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-10-26_5abce7534cb46ff8dc8c1ea4f7609054_coinminer_icedid_luca-stealer_njrat.exe --worker=597 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_tg_evex_vcvtps2ph_fault"
  2⤵
  PID:5460

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2392-3-0x0000026AA4E50000-0x0000026AA4E51000-memory.dmp

Download

memory/2392-6-0x0000026AA4E70000-0x0000026AA5270000-memory.dmp

Download

memory/2596-5-0x00000224AA3B0000-0x00000224AA3B1000-memory.dmp

Download

memory/3400-1-0x0000021016240000-0x0000021016640000-memory.dmp

Download

memory/3400-0-0x00000210161A0000-0x00000210161A1000-memory.dmp

Download

memory/3436-2-0x0000020448860000-0x0000020448861000-memory.dmp

Download

memory/4692-4-0x0000020EA3DF0000-0x0000020EA41F0000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads