553457ad37a6146171b99e21aea5a0120d92a3fb60f7bd78e1de09bbbafc1cdb

Analysis

max time kernel
148s
max time network
127s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/11/2026, 14:29

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
Size 4.7MB
Sample261102-rtnepaax4z
SHA256 553457ad37a6146171b99e21aea5a0120d92a3fb60f7bd78e1de09bbbafc1cdb
MD5 94cb1b8d2fb390a774eb2e63c9696d3a
SHA1 135dbb98c2bbab54abab6dbe241a3b9e50699917
SHA512 3de9bc251e499180149e311c90ad8d189f1c449dd65e0809a24c6aa4f0d05511ef601004671f31ff66bf5b3c5f3ff914c679fc5b0321003e677214ae926d0782
SSDEEP 49152:IFt3iIlJZprzUOWxxGTRKlHpymojSoL3RFKtVtRGQOUgvkRCYoo5mP4Ku4CN1Oxw:euOaDlHSjNBgUxEdL0kNRO+
TLSH
T114363801B79608D8C93A917C9723F979F2B1F8401BF09AD702AA01796F3A7D55C36E36
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 2 IoCs

Adversaries may check for Internet connectivity on compromised systems.

discovery

Internet Connection Discovery

T1016.001

pid	Process
5664	2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
3196	2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3236 wrote to memory of 5968	3236	2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe	89
PID 3236 wrote to memory of 1996	3236	2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe	90
PID 3236 wrote to memory of 5900	3236	2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe	91
PID 3236 wrote to memory of 5672	3236	2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe	92
PID 3236 wrote to memory of 4352	3236	2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe	93
PID 3236 wrote to memory of 4632	3236	2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe	94
PID 3236 wrote to memory of 5820	3236	2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe	95
PID 3236 wrote to memory of 1788	3236	2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe	96
PID 3236 wrote to memory of 6028	3236	2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe	97
PID 3236 wrote to memory of 4660	3236	2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe	98
PID 3236 wrote to memory of 1204	3236	2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe	99
PID 3236 wrote to memory of 5388	3236	2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe	100
PID 3236 wrote to memory of 1820	3236	2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe	101
PID 3236 wrote to memory of 2788	3236	2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe	102
PID 3236 wrote to memory of 2636	3236	2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe	103
PID 3236 wrote to memory of 4304	3236	2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe	104
PID 3236 wrote to memory of 3180	3236	2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe	105
PID 3236 wrote to memory of 2024	3236	2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe	106
PID 3236 wrote to memory of 2060	3236	2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe	107
PID 3236 wrote to memory of 4124	3236	2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe	108
PID 3236 wrote to memory of 5288	3236	2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe	109
PID 3236 wrote to memory of 4584	3236	2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe	110
PID 3236 wrote to memory of 3540	3236	2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe	111
PID 3236 wrote to memory of 3324	3236	2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe	112
PID 3236 wrote to memory of 5512	3236	2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe	113
PID 3236 wrote to memory of 3024	3236	2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe	114
PID 3236 wrote to memory of 6104	3236	2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe	115
PID 3236 wrote to memory of 5320	3236	2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe	116
PID 3236 wrote to memory of 3320	3236	2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe	117
PID 3236 wrote to memory of 2484	3236	2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe	118
PID 3236 wrote to memory of 4676	3236	2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe	119
PID 3236 wrote to memory of 4768	3236	2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe	120
PID 3236 wrote to memory of 1056	3236	2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe	121
PID 3236 wrote to memory of 1032	3236	2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe	122
PID 3236 wrote to memory of 456	3236	2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe	123
PID 3236 wrote to memory of 3816	3236	2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe	124
PID 3236 wrote to memory of 2528	3236	2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe	125
PID 3236 wrote to memory of 4180	3236	2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe	126
PID 3236 wrote to memory of 4972	3236	2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe	127
PID 3236 wrote to memory of 1420	3236	2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe	128
PID 3236 wrote to memory of 3548	3236	2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe	129
PID 3236 wrote to memory of 4964	3236	2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe	130
PID 3236 wrote to memory of 6140	3236	2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe	131
PID 3236 wrote to memory of 1904	3236	2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe	132
PID 3236 wrote to memory of 2184	3236	2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe	133
PID 3236 wrote to memory of 4636	3236	2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe	134
PID 3236 wrote to memory of 5728	3236	2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe	135
PID 3236 wrote to memory of 4188	3236	2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe	136
PID 3236 wrote to memory of 6012	3236	2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe	137
PID 3236 wrote to memory of 1100	3236	2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe	138
PID 3236 wrote to memory of 4836	3236	2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe	139
PID 3236 wrote to memory of 3392	3236	2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe	140
PID 3236 wrote to memory of 2768	3236	2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe	141
PID 3236 wrote to memory of 1384	3236	2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe	142
PID 3236 wrote to memory of 5624	3236	2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe	143
PID 3236 wrote to memory of 4968	3236	2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe	144
PID 3236 wrote to memory of 2472	3236	2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe	145
PID 3236 wrote to memory of 2976	3236	2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe	146
PID 3236 wrote to memory of 1344	3236	2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe	147
PID 3236 wrote to memory of 6084	3236	2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe	148
PID 3236 wrote to memory of 4120	3236	2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe	149
PID 3236 wrote to memory of 4680	3236	2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe	150
PID 3236 wrote to memory of 2012	3236	2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe	151
PID 3236 wrote to memory of 3896	3236	2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe	152

C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
"C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3236
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=0 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_in"
  2⤵
  PID:5968
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=1 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_out"
  2⤵
  PID:1996
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=2 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_mem_hook_all"
  2⤵
  PID:5900
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=3 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_inc_dec_pxor"
  2⤵
  PID:5672
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=4 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_avx_vpxor_ymm"
  2⤵
  PID:4352
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=5 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_avx_vex128_zero_upper"
  2⤵
  PID:4632
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=6 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_avx_scalar_zero_upper"
  2⤵
  PID:5820
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=7 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_avx_fma_ps"
  2⤵
  PID:1788
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=8 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fma_scalar_variants"
  2⤵
  PID:6028
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=9 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_avx2_broadcast_permute"
  2⤵
  PID:4660
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=10 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_avx2_variable_shifts"
  2⤵
  PID:1204
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=11 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_avx2_mask_gather"
  2⤵
  PID:5388
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=12 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_avx_vzeroall"
  2⤵
  PID:1820
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=13 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_aes_pclmul"
  2⤵
  PID:2788
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=14 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_avx512_tcg_mask"
  2⤵
  PID:2636
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=15 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vaes_vex_gating"
  2⤵
  PID:4304
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=16 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vpclmulqdq_tcg_mask"
  2⤵
  PID:3180
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=17 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vnni_ifma_ne_cpuid"
  2⤵
  PID:2024
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=18 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vnni_ifma_ne_vectors"
  2⤵
  PID:2060
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=19 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vnni_ifma_ne_ud"
  2⤵
  PID:4124
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=20 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ptwrite_ud"
  2⤵
  PID:5288
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=21 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vsha512"
  2⤵
  PID:4584
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=22 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vsm3"
  2⤵
  PID:3540
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=23 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vsm4"
  2⤵
  PID:3324
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=24 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_tsx_rtm_always_abort"
  2⤵
  PID:5512
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=25 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_relative_jump"
  2⤵
  PID:3024
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=26 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_loop"
  2⤵
  PID:6104
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=27 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_invalid_mem_read"
  2⤵
  PID:5320
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=28 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_invalid_mem_write"
  2⤵
  PID:3320
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=29 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_invalid_jump"
  2⤵
  PID:2484
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=30 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_64_syscall"
  2⤵
  PID:4676
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=31 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_16_add"
  2⤵
  PID:4768
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=32 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_reg_save"
  2⤵
  PID:1056
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=33 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_invalid_mem_read_stop_in_cb"
  2⤵
  PID:1032
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=34 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_x87_fnstenv"
  2⤵
  PID:456
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=35 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_mmio"
  2⤵
  PID:3816
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=36 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_missing_code"
  2⤵
  PID:2528
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=37 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_smc_xor"
  2⤵
  PID:4180
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=38 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_smc_add"
  2⤵
  PID:4972
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=39 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_smc_mem_hook"
  2⤵
  PID:1420
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=40 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_mmio_uc_mem_rw"
  2⤵
  PID:3548
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=41 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sysenter"
  2⤵
  PID:4964
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=42 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_hook_cpuid"
  2⤵
  PID:6140
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=43 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_486_cpuid"
  2⤵
  PID:1904
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=44 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_qemu72_xsave_cpuid"
  2⤵
  PID:2184
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=45 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_opmask_registers"
  2⤵
  PID:4636
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=46 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_qemu72_msr_state"
  2⤵
  PID:5728
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=47 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_clear_tb_cache"
  2⤵
  PID:4188
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=48 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_clear_empty_tb"
  2⤵
  PID:6012
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=49 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_self_linked_tb_guest_smc"
  2⤵
  PID:1100
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=50 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_two_page_tb_invalidation"
  2⤵
  PID:4836
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=51 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_tb_cache_engine_isolation"
  2⤵
  PID:3392
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=52 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_hook_tcg_op"
  2⤵
  PID:2768
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=53 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_cmpxchg"
  2⤵
  PID:1384
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=54 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_cmpxchg32_accumulator"
  2⤵
  PID:5624
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=55 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_cmpxchg32_register"
  2⤵
  PID:4968
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=56 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ret_imm16_unsigned"
  2⤵
  PID:2472
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=57 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_rorx_rip_relative_imm"
  2⤵
  PID:2976
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=58 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_shld_rip_relative_imm"
  2⤵
  PID:1344
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=59 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_shrd_rip_relative_imm"
  2⤵
  PID:6084
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=60 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_pdep32_zero_extend"
  2⤵
  PID:4120
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=61 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_pext32_zero_extend"
  2⤵
  PID:4680
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=62 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_nested_emu_start"
  2⤵
  PID:2012
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=63 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_nested_emu_stop"
  2⤵
  PID:3896
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=64 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_64_nested_emu_start_error"
  2⤵
  PID:4904
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=65 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_eflags_reserved_bit"
  2⤵
  PID:4740
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=66 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_blsi_cf"
  2⤵
  PID:2828
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=67 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_blsr_flags"
  2⤵
  PID:2068
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=68 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_blsmsk_flags"
  2⤵
  PID:2028
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=69 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_bzhi_index_boundary"
  2⤵
  PID:4488
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=70 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_nested_uc_emu_start_exits"
  2⤵
  PID:5096
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=71 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_clear_count_cache"
  2⤵
  PID:3028
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=72 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_correct_address_in_small_jump_hook"
  2⤵
  PID:5300
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=73 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_correct_address_in_long_jump_hook"
  2⤵
  PID:1668
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=74 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_invalid_vex_l"
  2⤵
  PID:4560
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=75 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sse_aligned_access"
  2⤵
  PID:4668
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=76 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_data_watchpoint"
  2⤵
  PID:204
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=77 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_lazy_mapping"
  2⤵
  - System Network Configuration Discovery: Internet Connection Discovery
  PID:5664
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=78 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_16_incorrect_ip"
  2⤵
  PID:4708
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=79 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_mmu"
  2⤵
  PID:1640
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=80 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_read_virtual"
  2⤵
  PID:1380
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=81 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vtlb"
  2⤵
  PID:4800
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=82 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_segmentation"
  2⤵
  PID:4540
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=83 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_0xff_lcall"
  2⤵
  PID:4052
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=84 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_64_not_overwriting_tmp0_for_pc_update"
  2⤵
  PID:1844
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=85 --no-exec --no-summary --verbose=2 --color=always -- "test_fxsave_fpip_x86"
  2⤵
  PID:848
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=86 --no-exec --no-summary --verbose=2 --color=always -- "test_fxsave_fpip_x64"
  2⤵
  PID:1080
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=87 --no-exec --no-summary --verbose=2 --color=always -- "test_bswap_x64"
  2⤵
  PID:2640
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=88 --no-exec --no-summary --verbose=2 --color=always -- "test_rex_x64"
  2⤵
  PID:3348
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=89 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ro_segfault"
  2⤵
  PID:2556
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=90 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vpermilps_null_ptr_call"
  2⤵
  PID:4860
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=91 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_hook_insn_rdtsc"
  2⤵
  PID:5660
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=92 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_hook_insn_rdtscp"
  2⤵
  PID:2244
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=93 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_hook_insn_wrmsr"
  2⤵
  PID:5376
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=94 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_hook_insn_rdmsr"
  2⤵
  PID:4492
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=95 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_dr7"
  2⤵
  PID:1152
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=96 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_hook_block"
  2⤵
  PID:4736
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=97 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_mem_hooks_pc_guarantee"
  2⤵
  PID:4544
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=98 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_aaa_flags"
  2⤵
  PID:2916
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=99 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_aas_flags"
  2⤵
  PID:708
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=100 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_group_1a"
  2⤵
  PID:2360
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=101 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_lock_bt_mem"
  2⤵
  PID:5640
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=102 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_lock_bt_reg"
  2⤵
  PID:5848
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=103 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_lock_btc_mem"
  2⤵
  PID:2864
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=104 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_lock_btc_reg"
  2⤵
  PID:3224
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=105 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_avx512_optin"
  2⤵
  PID:4780
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=106 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_avx512_xsetbv"
  2⤵
  PID:1628
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=107 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_zmm_api_32"
  2⤵
  PID:2532
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=108 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_avx512_xsave"
  2⤵
  PID:4664
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=109 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_avx512_xsavec"
  2⤵
  PID:5932
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=110 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_avx512_xsave_32"
  2⤵
  PID:5712
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=111 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_avx512_cpuid"
  2⤵
  PID:3000
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=112 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vex_zero_maxvl"
  2⤵
  PID:3464
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=113 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_keylocker_cpuid"
  2⤵
  PID:2544
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=114 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_keylocker_zero_iwkey_vector"
  2⤵
  PID:2952
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=115 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_keylocker_aes128"
  2⤵
  PID:1784
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=116 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_keylocker_wide256"
  2⤵
  PID:1960
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=117 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_keylocker_faults"
  2⤵
  PID:5544
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=118 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_keylocker_cpl3"
  2⤵
  PID:2824
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=119 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_rao_int"
  2⤵
  PID:3492
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=120 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_movrs_prefetchrst2"
  2⤵
  PID:5072
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=121 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_user_msr"
  2⤵
  PID:4340
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=122 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_uintr_uif"
  2⤵
  PID:2740
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=123 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_uintr_senduipi"
  2⤵
  PID:4552
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=124 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_uintr_delivery"
  2⤵
  PID:4956
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=125 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_waitpkg"
  2⤵
  PID:4480
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=126 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_wp_tsc_adjust"
  2⤵
  PID:5164
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=127 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_wp_profiles"
  2⤵
  PID:4624
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=128 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_tw_deadline"
  2⤵
  PID:5820
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=129 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_tw_os_limit"
  2⤵
  PID:1788
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=130 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_tw_wrap"
  2⤵
  PID:6028
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=131 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_tw_monitor"
  2⤵
  PID:4660
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=132 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_tw_tsc_adjust"
  2⤵
  PID:1204
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=133 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_tw_wake"
  2⤵
  PID:2860
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=134 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ta_enum"
  2⤵
  PID:1744
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=135 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ta_adjust_moves_tsc"
  2⤵
  PID:5856
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=136 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ta_tsc_write"
  2⤵
  PID:1076
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=137 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ta_wait"
  2⤵
  PID:5104
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=138 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ta_vmx"
  2⤵
  PID:1492
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=139 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_enqcmd"
  2⤵
  PID:2060
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=140 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_smx_pconfig_sgx"
  2⤵
  PID:4124
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=141 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_cet_shadow_stack"
  2⤵
  PID:5288
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=142 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_cet_shadow_stack_32"
  2⤵
  PID:4584
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=143 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_cet_call_ret"
  2⤵
  PID:3540
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=144 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_cet_ibt"
  2⤵
  PID:3324
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=145 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_cet_shadow_stack_paging"
  2⤵
  PID:5512
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=146 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_cet2_far_call_ret"
  2⤵
  PID:3024
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=147 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_cet2_call_gate"
  2⤵
  PID:4724
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=148 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_cet2_iret"
  2⤵
  PID:5824
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=149 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_cet2_iret_vm86"
  2⤵
  PID:2008
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=150 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_cet2_sysret_sysexit"
  2⤵
  PID:3192
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=151 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_cet2_task_switch"
  2⤵
  PID:1864
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=152 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_cet2_xsaves"
  2⤵
  PID:2080
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=153 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_cet2_endbr_rex2"
  2⤵
  PID:1196
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=154 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_opmask_optin"
  2⤵
  PID:2844
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=155 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_opmask_vectors"
  2⤵
  PID:3312
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=156 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_opmask_ud"
  2⤵
  PID:1516
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=157 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_opmask_features"
  2⤵
  PID:1764
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=158 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_opmask_state"
  2⤵
  PID:3292
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=159 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_lock_hint_nops"
  2⤵
  PID:4712
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=160 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_mpx_modrm_length"
  2⤵
  PID:3740
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=161 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vex_b_32"
  2⤵
  PID:2576
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=162 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_mem_write_invalidates_tb"
  2⤵
  PID:4068
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=163 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_amx_optin"
  2⤵
  PID:2992
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=164 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_amx_xsetbv"
  2⤵
  PID:3728
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=165 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_amx_api"
  2⤵
  PID:6008
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=166 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_amx_cfg_insns"
  2⤵
  PID:808
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=167 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_amx_load_store"
  2⤵
  PID:3044
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=168 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_amx_tmul_vectors"
  2⤵
  PID:4556
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=169 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_amx_exceptions"
  2⤵
  PID:5916
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=170 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_amx_xsave"
  2⤵
  PID:5220
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=171 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_amx_xfd"
  2⤵
  PID:3276
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=172 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_evex_routing"
  2⤵
  PID:3412
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=173 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_evex_32bit_fields"
  2⤵
  PID:3792
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=174 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_evex_state"
  2⤵
  PID:3336
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=175 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_evex_masked_memory"
  2⤵
  PID:4404
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=176 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_evex_riprel"
  2⤵
  PID:4400
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=177 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_evex_gather_restart"
  2⤵
  PID:1384
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=178 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_evex_gather_hooks"
  2⤵
  PID:4968
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=179 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_evex_scatter_restart"
  2⤵
  PID:2472
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=180 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_evex_scatter_order"
  2⤵
  PID:2976
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=181 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_evex_vsib_modes"
  2⤵
  PID:5116
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=182 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_evex_scalar_memory"
  2⤵
  PID:1344
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=183 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_evex_comis_eflags"
  2⤵
  PID:4120
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=184 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_evex_m2_memory"
  2⤵
  PID:464
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=185 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_evex_m2_features"
  2⤵
  PID:4680
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=186 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_evex_bw_cpuid"
  2⤵
  PID:3896
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=187 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_evex_bw_masked_bytes"
  2⤵
  PID:4904
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=188 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_evex_bw_kmask64"
  2⤵
  PID:4740
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=189 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_avx512dq_gating"
  2⤵
  PID:2828
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=190 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_avx512dq_values"
  2⤵
  PID:2068
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=191 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_avx512cd_optin"
  2⤵
  PID:2028
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=192 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_avx512cd_gating"
  2⤵
  PID:4488
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=193 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_avx512_m4_bits"
  2⤵
  PID:5096
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=194 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_evex_cvt_narrow"
  2⤵
  PID:3028
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=195 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_evex_cvt_ph_store"
  2⤵
  PID:5300
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=196 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_evex_cvt_scalar_merge"
  2⤵
  PID:1668
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=197 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_evex_cvt_gpr_w"
  2⤵
  PID:4560
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=198 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_evex_cvt_xm"
  2⤵
  PID:4668
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=199 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_f16c_vcvtps2ph_ftz"
  2⤵
  PID:204
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=200 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sdm_documented_deviations"
  2⤵
  PID:2164
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=201 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fp16_optin"
  2⤵
  PID:4708
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=202 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fp16_gating"
  2⤵
  PID:1640
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=203 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fp16_xm"
  2⤵
  PID:1452
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=204 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fp16_complex"
  2⤵
  PID:1380
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=205 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fp16_cvt_gpr"
  2⤵
  PID:5068
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=206 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_avx10_optin"
  2⤵
  PID:2036
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=207 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_avx10_gating"
  2⤵
  PID:5756
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=208 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_avx10_2_gating"
  2⤵
  PID:1340
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=209 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_avx10b_ctl"
  2⤵
  PID:4160
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=210 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_avx10b_gating"
  2⤵
  PID:4320
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=211 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_avx10b_values"
  2⤵
  PID:1232
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=212 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_avx10b_fault_suppression"
  2⤵
  PID:700
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=213 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vx_avx10_cpuid"
  2⤵
  PID:4164
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=214 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vx_v2aux_ctl"
  2⤵
  PID:2612
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=215 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vx_salc_udb"
  2⤵
  PID:5036
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=216 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sse_unmasked_ou"
  2⤵
  PID:5616
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=217 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sse_dpps_steps"
  2⤵
  PID:2180
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=218 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_mxcsr_api"
  2⤵
  PID:3860
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=219 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_cpuid_strict_default"
  2⤵
  PID:4736
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=220 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_bp_tcg_temp_overflow"
  2⤵
  PID:4948
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=221 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_bp_iret_vm86"
  2⤵
  PID:1360
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=222 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_bp_rdpmc_gp"
  2⤵
  PID:2604
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=223 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_bp_vex_vvvv3_32"
  2⤵
  PID:5636
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=224 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_bp_lock_new_decoder"
  2⤵
  PID:4424
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=225 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_bp_lock_old_decoder"
  2⤵
  PID:2868
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=226 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_bp_pause_tf"
  2⤵
  PID:4524
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=227 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_bp_ss_sti_tf"
  2⤵
  PID:4888
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=228 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_bp_syscall_modes"
  2⤵
  PID:988
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=229 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_bp_mov_dr"
  2⤵
  PID:2324
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=230 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_bp_dr7_gd"
  2⤵
  PID:2616
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=231 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_bp_tss16_selectors"
  2⤵
  PID:1576
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=232 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_bp_tss16_gpr_upper"
  2⤵
  PID:5684
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=233 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_bp_tss_save_old_format"
  2⤵
  PID:6120
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=234 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_bp_cs_base_fetch"
  2⤵
  PID:3828
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=235 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_bp_canonical_ss_cs_base"
  2⤵
  PID:3608
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=236 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_m4b_vp2i_optin"
  2⤵
  PID:4960
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=237 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_m4b_vp2i_gating"
  2⤵
  PID:3316
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=238 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_m4b_evex_gating"
  2⤵
  PID:2496
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=239 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_m4a_optin"
  2⤵
  PID:1960
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=240 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_m4a_gating"
  2⤵
  PID:5544
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=241 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_m4a_values"
  2⤵
  PID:2824
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=242 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_f2_lss_rexw"
  2⤵
  PID:5704
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=243 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_f2_stack64"
  2⤵
  PID:1996
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=244 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_f2_store_no_partial"
  2⤵
  PID:4752
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=245 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_f2_store_no_partial_paging"
  2⤵
  PID:2508
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=246 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_f2_maxphyaddr"
  2⤵
  PID:824
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=247 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_f2_syscall_sce"
  2⤵
  PID:5168
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=248 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_f2_rdpmc"
  2⤵
  PID:3240
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=249 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_apx_optin"
  2⤵
  PID:3416
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=250 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_apx_regs"
  2⤵
  PID:3488
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=251 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_apx_xsave"
  2⤵
  PID:3476
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=252 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_apx_gating"
  2⤵
  PID:4216
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=253 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_apx_rex2_decode"
  2⤵
  PID:2424
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=254 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_apx_evex"
  2⤵
  PID:2312
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=255 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ax4_decode"
  2⤵
  PID:5200
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=256 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ax4_gating"
  2⤵
  PID:4296
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=257 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ax4_jmpabs"
  2⤵
  PID:4308
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=258 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ax4_user_msr"
  2⤵
  PID:4044
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=259 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_amx2_optin"
  2⤵
  PID:6096
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=260 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_amx2_exceptions"
  2⤵
  PID:2216
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=261 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_amx2_values"
  2⤵
  PID:4252
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=262 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_amx2_xsaves"
  2⤵
  PID:3180
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=263 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx3_flags_at_fault"
  2⤵
  PID:1268
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=264 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx3_flags_mem_hook"
  2⤵
  PID:5076
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=265 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx3_enter"
  2⤵
  PID:5288
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=266 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx3_far_limits"
  2⤵
  PID:2516
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=267 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx3_far_call_pushes"
  2⤵
  PID:5284
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=268 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx3_cmpxchg_ro"
  2⤵
  PID:2996
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=269 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx3_vsib_pending_db"
  2⤵
  PID:3528
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=270 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_axc_wrss_paging"
  2⤵
  PID:3024
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=271 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_axc_evex_r4_kreg"
  2⤵
  PID:6104
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=272 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_axc_apx_nci_ndd_nf"
  2⤵
  PID:5824
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=273 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xm_x87_ptr_profiles"
  2⤵
  PID:3320
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=274 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xm_scatter_write_hook"
  2⤵
  PID:2484
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=275 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_rg_mmx_regs"
  2⤵
  PID:4676
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=276 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_rg_pkru"
  2⤵
  PID:4768
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=277 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_rg_context_roundtrip"
  2⤵
  PID:4852
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=278 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_rg_context_reg_write"
  2⤵
  PID:5936
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=279 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_rg_context_tlb"
  2⤵
  PID:1916
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=280 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_rg_cpuid_0d1_ebx"
  2⤵
  PID:4892
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=281 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_rg_rdrand_seeded"
  2⤵
  PID:5092
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=282 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_rg_rdrand_context"
  2⤵
  PID:3700
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=283 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_rg_rdrand_host"
  2⤵
  PID:1672
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=284 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_rg_ac_conditions"
  2⤵
  PID:2588
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=285 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_rg_ac_helpers"
  2⤵
  PID:2372
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=286 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx4_exc_record"
  2⤵
  PID:2620
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=287 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx4_far_limits_gp0"
  2⤵
  PID:4844
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=288 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx4_selector_codes"
  2⤵
  PID:3616
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=289 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx4_ss0"
  2⤵
  PID:2184
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=290 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx4_pf_codes"
  2⤵
  PID:5000
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=291 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx4_cp_codes"
  2⤵
  PID:960
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=292 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx4_ts"
  2⤵
  PID:3536
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=293 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx4_cr2_probe"
  2⤵
  PID:1000
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=294 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx4_rep_cmps_restore"
  2⤵
  PID:712
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=295 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx4_hook_flags"
  2⤵
  PID:1096
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=296 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx4_store_stop"
  2⤵
  PID:5988
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=297 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx4_store_prepare"
  2⤵
  PID:1240
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=298 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx4_store_evex"
  2⤵
  PID:2692
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=299 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx4_store_partial"
  2⤵
  PID:1320
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=300 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx4_call_ss_pf"
  2⤵
  PID:5624
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=301 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx4_store_amx"
  2⤵
  PID:356
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=302 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx4_mpx_bndcfg"
  2⤵
  PID:2084
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=303 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx4_mpx_bndcfg_load"
  2⤵
  PID:5944
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=304 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx4_hook_flags_apx"
  2⤵
  PID:3716
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=305 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_si_vpmov_dq"
  2⤵
  PID:932
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=306 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_si_wrmsrns"
  2⤵
  PID:6032
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=307 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_si_msrlist"
  2⤵
  PID:2480
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=308 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_si_msr_imm"
  2⤵
  PID:4120
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=309 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_si_hreset"
  2⤵
  PID:2924
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=310 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_si_lkgs"
  2⤵
  PID:1908
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=311 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_si_invpcid"
  2⤵
  PID:4904
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=312 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_si_pbndkb"
  2⤵
  PID:5060
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=313 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_pc_tme_msrs"
  2⤵
  PID:2020
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=314 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_pc_pconfig"
  2⤵
  PID:992
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=315 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx5_probe_write_unmapped"
  2⤵
  PID:5620
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=316 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx5_mstore_write_once"
  2⤵
  PID:2656
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=317 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx5_partial_reads"
  2⤵
  PID:3056
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=318 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fx5_context_writes"
  2⤵
  PID:5976
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=319 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sm_sysenter_rip"
  2⤵
  PID:5108
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=320 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sm_syscall"
  2⤵
  PID:5100
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=321 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sm_syscall_cet"
  2⤵
  PID:3196
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=322 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sm_sysenter"
  2⤵
  PID:4116
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=323 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sm_sysret_flags"
  2⤵
  PID:1276
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=324 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sm_sysexit"
  2⤵
  PID:5752
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=325 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sm_msr_present"
  2⤵
  PID:4756
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=326 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sm_msr_values"
  2⤵
  PID:2668
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=327 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sm_pmu"
  2⤵
  PID:4800
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=328 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xp_optin"
  2⤵
  PID:2304
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=329 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xp_4vnniw"
  2⤵
  PID:2912
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=330 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xp_4fmaps"
  2⤵
  PID:4052
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=331 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xp_pf"
  2⤵
  PID:1844
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=332 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xp_er"
  2⤵
  PID:848
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=333 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ap_reset_state"
  2⤵
  PID:1080
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=334 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ap_base_transitions"
  2⤵
  PID:2640
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=335 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ap_tpr_cr8"
  2⤵
  PID:3348
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=336 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ap_self_ipi"
  2⤵
  PID:2140
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=337 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ap_priority_eoi"
  2⤵
  PID:4860
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=338 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ap_nmi"
  2⤵
  PID:5660
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=339 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ap_errors"
  2⤵
  PID:4744
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=340 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ap_unsupported"
  2⤵
  PID:5376
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=341 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ap_no_hook"
  2⤵
  PID:4492
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=342 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ap_context"
  2⤵
  PID:5680
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=343 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ap_bus_api"
  2⤵
  PID:1280
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=344 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ap_cross_ipi"
  2⤵
  PID:1304
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=345 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ap_multi_vcpu"
  2⤵
  PID:792
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=346 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ap_uintr_cross"
  2⤵
  PID:708
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=347 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ap_uintr_if0"
  2⤵
  PID:1596
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=348 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ap_uintr_cross_delivery"
  2⤵
  PID:5640
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=349 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ap_idt_delivery"
  2⤵
  PID:2868
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=350 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_rc_rcp14_tables"
  2⤵
  PID:4524
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=351 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_rc_rsqrt14_tables"
  2⤵
  PID:4888
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=352 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_rc_scalar"
  2⤵
  PID:988
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=353 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_rc_fp16"
  2⤵
  PID:2324
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=354 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_rc_bf16"
  2⤵
  PID:2616
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=355 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_rc_legacy"
  2⤵
  PID:5932
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=356 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_rc_bounds"
  2⤵
  PID:2132
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=357 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_amb2_rows"
  2⤵
  PID:1928
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=358 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_amb2_fp64_bound"
  2⤵
  PID:4568
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=359 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_amb2_tiny"
  2⤵
  PID:2800
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=360 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_amb2_exp2d_gap"
  2⤵
  PID:2952
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=361 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ig_tme_api"
  2⤵
  PID:1292
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=362 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ig_apic_api"
  2⤵
  PID:1784
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=363 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ig_context_msr"
  2⤵
  PID:4292
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=364 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ts_tse_optin"
  2⤵
  PID:5020
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=365 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ts_tse_key_program"
  2⤵
  PID:4520
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=366 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ts_tse_wrapped"
  2⤵
  PID:4772
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=367 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ts_msr_api_refused"
  2⤵
  PID:5736
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=368 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ts_apic_profile"
  2⤵
  PID:5672
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=369 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ts_context_never_saved"
  2⤵
  PID:2596
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=370 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ts_itd"
  2⤵
  PID:4352
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=371 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_tf32_optin"
  2⤵
  PID:1816
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=372 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_tf32_exceptions"
  2⤵
  PID:4064
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=373 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_tf32_values"
  2⤵
  PID:1336
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=374 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_tsefix_cap_layout"
  2⤵
  PID:2664
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=375 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_tsefix_enc_alg"
  2⤵
  PID:4572
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=376 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_tsefix_reserved"
  2⤵
  PID:2384
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=377 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xs_ts_nm"
  2⤵
  PID:1204
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=378 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xs_ts_order"
  2⤵
  PID:5388
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=379 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xs_cpuid_hv_range"
  2⤵
  PID:3360
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=380 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xs_xgetbv1_profile"
  2⤵
  PID:3012
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=381 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fl_fred_enum"
  2⤵
  PID:4148
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=382 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fl_fred_deliver_cpl0"
  2⤵
  PID:2880
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=383 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fl_fred_stack_levels"
  2⤵
  PID:2272
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=384 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fl_fred_nested"
  2⤵
  PID:1088
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=385 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fl_fred_disallowed"
  2⤵
  PID:1492
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=386 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fl_erets"
  2⤵
  PID:2356
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=387 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fl_eretu_syscall"
  2⤵
  PID:1128
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=388 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fl_erets_shadow"
  2⤵
  PID:4020
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=389 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fl_fred_far"
  2⤵
  PID:2452
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=390 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fl_lam"
  2⤵
  PID:4076
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=391 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fl_lam_paging"
  2⤵
  PID:5648
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=392 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fl_eret_legacy"
  2⤵
  PID:1724
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=393 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_st_xsetbv_profile"
  2⤵
  PID:2988
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=394 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_st_nx_fetch"
  2⤵
  PID:624
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=395 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_st_smc_remap"
  2⤵
  PID:5272
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=396 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_st_unmap_paging"
  2⤵
  PID:5448
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=397 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_st_reset_xcr0_profile"
  2⤵
  PID:4796
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=398 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sgx_cpuid"
  2⤵
  PID:5548
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=399 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sgx_platform_ctl"
  2⤵
  PID:2080
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=400 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sgx_msr"
  2⤵
  PID:1196
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=401 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sgx_invd"
  2⤵
  PID:2844
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=402 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sgx_build_einit"
  2⤵
  PID:3312
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=403 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sgx_ecreate_eadd_checks"
  2⤵
  PID:2972
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=404 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sgx_encls_gates"
  2⤵
  PID:1764
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=405 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sgx_abort_page"
  2⤵
  PID:3292
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=406 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sgx_eremove_epa_eblock"
  2⤵
  PID:4712
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=407 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sgx_edbg"
  2⤵
  PID:3740
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=408 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sgx_eenter_eexit"
  2⤵
  PID:2576
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=409 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sgx_aex_eresume"
  2⤵
  PID:4068
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=410 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sgx_enclave_access"
  2⤵
  PID:2992
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=411 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sgx_enclave_debug"
  2⤵
  PID:1904
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=412 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sgx_ereport_egetkey"
  2⤵
  PID:3048
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=413 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sgx_ewb_eld"
  2⤵
  PID:5728
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=414 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sgx_sgx2"
  2⤵
  PID:3044
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=415 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_gs_smx"
  2⤵
  PID:4556
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=416 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sgx_xfrm_osxsave"
  2⤵
  PID:1616
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=417 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sgx_cet_ibt"
  2⤵
  PID:4792
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=418 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sgx_aex_delivery"
  2⤵
  PID:4836
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=419 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sgx_enclave32"
  2⤵
  PID:3392
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=420 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_idterr_vector64"
  2⤵
  PID:2768
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=421 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_idterr_ext64"
  2⤵
  PID:2772
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=422 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_idterr_cs64"
  2⤵
  PID:4576
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=423 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_optin"
  2⤵
  PID:468
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=424 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_lifecycle"
  2⤵
  PID:2644
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=425 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_vmread_vmwrite"
  2⤵
  PID:2900
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=426 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_invept"
  2⤵
  PID:4648
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=427 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_entry_exit"
  2⤵
  PID:6084
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=428 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_nonroot_insn"
  2⤵
  PID:5956
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=429 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_inject"
  2⤵
  PID:5060
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=430 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_cr_dr"
  2⤵
  PID:476
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=431 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_cond_exits"
  2⤵
  PID:5700
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=432 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_io_msr"
  2⤵
  PID:4708
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=433 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_exc_bitmap"
  2⤵
  PID:2036
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=434 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_intr_nmi"
  2⤵
  PID:4264
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=435 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_ept"
  2⤵
  PID:700
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=436 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_apicv_tpr_x2apic"
  2⤵
  PID:5804
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=437 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_apicv_access"
  2⤵
  PID:4492
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=438 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_apicv_posted"
  2⤵
  PID:5140
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=439 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_fred"
  2⤵
  PID:5084
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=440 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_pending_dbg"
  2⤵
  PID:708
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=441 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_lam_cr3"
  2⤵
  PID:2864
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=442 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_prefix_root"
  2⤵
  PID:2324
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=443 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_prefix_guest"
  2⤵
  PID:1968
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=444 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_prefix_misc"
  2⤵
  PID:2424
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=445 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_encls"
  2⤵
  PID:2464
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=446 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_sgx_enc_events"
  2⤵
  PID:5104
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=447 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_sgx_exit"
  2⤵
  PID:2024
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=448 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_sgx_mtf"
  2⤵
  PID:1088
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=449 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_sgx_apic"
  2⤵
  PID:1268
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=450 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_exit_caps"
  2⤵
  PID:5384
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=451 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_proc3"
  2⤵
  PID:4584
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=452 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_pdbg_save"
  2⤵
  PID:2412
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=453 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_mtf_tf"
  2⤵
  PID:5436
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=454 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_inj_len"
  2⤵
  PID:4724
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=455 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_ept_ve"
  2⤵
  PID:3192
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=456 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_mtf_tpr"
  2⤵
  PID:1056
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=457 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_ept_ve2"
  2⤵
  PID:2904
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=458 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_inj_len15"
  2⤵
  PID:4972
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=459 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_pdpte_tme"
  2⤵
  PID:3700
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=460 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_inj_df"
  2⤵
  PID:3564
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=461 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_ve_gpa48"
  2⤵
  PID:3740
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=462 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vmx_host_cr3_tme"
  2⤵
  PID:2992
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=463 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_tx_optin"
  2⤵
  PID:1904
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=464 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_tx_seamrr"
  2⤵
  PID:960
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=465 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_tx_insn"
  2⤵
  PID:3536
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=466 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_tm_activate"
  2⤵
  PID:3792
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=467 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_tm_unchanged"
  2⤵
  PID:2692
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=468 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_tm_mov_cr3"
  2⤵
  PID:5032
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=469 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_tm_paging_width"
  2⤵
  PID:4244
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=470 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_tm_width_bounds"
  2⤵
  PID:3696
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=471 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_tm_pae_pdpte"
  2⤵
  PID:4968
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=472 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_tm_apic_base"
  2⤵
  PID:2472
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=473 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_tm_mtrr"
  2⤵
  PID:5116
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=474 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_tm_pconfig"
  2⤵
  PID:3380
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=475 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ti_vmx_ptr"
  2⤵
  PID:5708
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=476 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ti_vmx_entry"
  2⤵
  PID:5484
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=477 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ti_ept_entries"
  2⤵
  PID:4268
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=478 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ti_ept_guest_width"
  2⤵
  PID:4740
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=479 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_i6_ext_matrix64"
  2⤵
  PID:992
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=480 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_i6_dpl64"
  2⤵
  PID:5948
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=481 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_i6_cs_mode64"
  2⤵
  PID:2656
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=482 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_i6_cs_sel64"
  2⤵
  PID:3056
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=483 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_i6_gate_rip64"
  2⤵
  PID:5976
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=484 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ig2_gate_rip_bounds64"
  2⤵
  PID:1104
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=485 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ig2_gate_rip_order64"
  2⤵
  PID:5768
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=486 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ig2_gate_rip_paging64"
  2⤵
  PID:1080
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=487 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ig2_gate_rip_cet64"
  2⤵
  PID:5680
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=488 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ig2_gate_rip_compat64"
  2⤵
  PID:4492
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=489 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ig2_gate_rip_vmx64"
  2⤵
  PID:5640
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=490 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ig2_gate_rip_tlbvirt64"
  2⤵
  PID:1656
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=491 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_idterr_gate16_64"
  2⤵
  PID:4888
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=492 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_idterr_gate_types64"
  2⤵
  PID:4352
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=493 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ig3_frame_cross64"
  2⤵
  PID:4260
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=494 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ig3_frame_cross_paging64"
  2⤵
  PID:720
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=495 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ig3_frame_cross_df64"
  2⤵
  PID:3728
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=496 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ig3_frame_cross_order64"
  2⤵
  PID:3048
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=497 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ig3_frame_cross_la57_64"
  2⤵
  PID:5916
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=498 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ig3_frame_cross_vmx64"
  2⤵
  PID:3412
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=499 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ig3_frame_cross_tlbvirt64"
  2⤵
  PID:3536
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=500 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ig3_int1_rip64"
  2⤵
  PID:2772
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=501 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ig3_int1_unchanged64"
  2⤵
  PID:1344
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=502 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ig3_int1_fred64"
  2⤵
  PID:2220
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=503 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ig3_int1_vmx64"
  2⤵
  PID:4220
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=504 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ig3_int1_legacy32"
  2⤵
  PID:5260
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=505 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xc_default_xcr0_models"
  2⤵
  PID:2960
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=506 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xc_arch_reset_vs_default"
  2⤵
  PID:1832
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=507 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xc_strict_off_keeps_xcr0"
  2⤵
  PID:6060
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=508 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_um_remap_stale_tb"
  2⤵
  PID:4488
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=509 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_um_unrelated_kept"
  2⤵
  PID:3500
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=510 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sr_restore_stale_tb"
  2⤵
  PID:5884
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=511 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sr_restore_unmapped"
  2⤵
  PID:5108
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=512 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sr_remove_cache_pages"
  2⤵
  PID:3456
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=513 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sr_regions_contained"
  2⤵
  PID:476
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=514 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sr_restore_new_mappings"
  2⤵
  - System Network Configuration Discovery: Internet Connection Discovery
  PID:3196
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=515 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sr_mmio_write_snapshot"
  2⤵
  PID:2936
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=516 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sr_map_ptr_host_changed"
  2⤵
  PID:2944
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=517 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sr_pt_ad_bits"
  2⤵
  PID:2752
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=518 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sr_restore_flatview"
  2⤵
  PID:5596
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=519 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_uc_mc_trigger"
  2⤵
  PID:3308
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=520 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_uc_mc_privilege"
  2⤵
  PID:2488
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=521 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_uc_mc_sign_id"
  2⤵
  PID:3908
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=522 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_uc_mc_profiles"
  2⤵
  PID:2780
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=523 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_smr_entry_state"
  2⤵
  PID:4708
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=524 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_smr_latched"
  2⤵
  PID:2668
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=525 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_smr_io_boundary"
  2⤵
  PID:2804
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=526 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_smr_intel64_map"
  2⤵
  PID:2036
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=527 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_smr_intel64_rsm"
  2⤵
  PID:2556
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=528 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_smr_intel64_cet"
  2⤵
  PID:2832
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=529 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_smr_intel64_io"
  2⤵
  PID:848
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=530 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_smr_intel64_halt"
  2⤵
  PID:2244
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=531 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_smr_intel32_map"
  2⤵
  PID:3512
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=532 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_smr_amd64_map"
  2⤵
  PID:1092
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=533 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_smr_amd64_rsm"
  2⤵
  PID:2016
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=534 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_smr_vendor"
  2⤵
  PID:4696
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=535 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_smr_revision_profiles"
  2⤵
  PID:4164
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=536 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_smr_dr_breakpoints"
  2⤵
  PID:2916
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=537 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xu_pcore_default"
  2⤵
  PID:2460
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=538 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xu_pcore"
  2⤵
  PID:4532
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=539 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xu_ecore"
  2⤵
  PID:5636
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=540 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xu_always"
  2⤵
  PID:2360
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=541 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xu_amd_unchanged"
  2⤵
  PID:5952
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=542 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xu_ctl"
  2⤵
  PID:5848
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=543 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xu_rules"
  2⤵
  PID:4780
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=544 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xu_mxcsr_xsave"
  2⤵
  PID:5640
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=545 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xu_context"
  2⤵
  PID:1628
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=546 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xz_reset_guest"
  2⤵
  PID:2868
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=547 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xz_reset_host"
  2⤵
  PID:5012
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=548 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xz_sizes_follow"
  2⤵
  PID:4288
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=549 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xz_derive_rules"
  2⤵
  PID:3508
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=550 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xq_profile_after_run"
  2⤵
  PID:4620
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=551 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xq_profile_order"
  2⤵
  PID:4568
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=552 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xq_xss_wrmsr"
  2⤵
  PID:4960
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=553 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xq_xsaves_roundtrip"
  2⤵
  PID:3464
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=554 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xq_component_rules"
  2⤵
  PID:3828
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=555 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vpf_profiles"
  2⤵
  PID:5568
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=556 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vpf_profile_timing"
  2⤵
  PID:1960
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=557 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vpf_profile_off"
  2⤵
  PID:1840
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=558 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_pk_user_access"
  2⤵
  PID:396
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=559 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_pk_supervisor_access"
  2⤵
  PID:5072
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=560 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_pk_pks_cr4"
  2⤵
  PID:2740
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=561 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_pk_xrstor_rights"
  2⤵
  PID:2920
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=562 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_pk_modes"
  2⤵
  PID:908
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=563 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_pk_msr35"
  2⤵
  PID:4752
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=564 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_cr4p_profiles"
  2⤵
  PID:2508
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=565 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_cr4p_each_bit"
  2⤵
  PID:1480
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=566 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_cr4p_off"
  2⤵
  PID:5168
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=567 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_efp_svme"
  2⤵
  PID:4924
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=568 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_efp_bits"
  2⤵
  PID:1920
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=569 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_efp_narrow"
  2⤵
  PID:2260
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=570 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_efv_entry"
  2⤵
  PID:6028
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=571 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_efv_host"
  2⤵
  PID:1504
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=572 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_efv_msr_areas"
  2⤵
  PID:4736
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=573 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_efv_exit_reserved"
  2⤵
  PID:2360
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=574 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_pw_enum"
  2⤵
  PID:5640
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=575 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_pw_exec"
  2⤵
  PID:1628
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=576 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_pw_cpl3"
  2⤵
  PID:2868
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=577 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_pw_legacy_modes"
  2⤵
  PID:5012
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=578 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_pf_lock_mov_dr"
  2⤵
  PID:4288
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=579 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_pf_lock_mov_dr_vmx"
  2⤵
  PID:3508
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=580 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_pf_lar_limit_bits"
  2⤵
  PID:1684
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=581 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_pf_ss_chain_tf"
  2⤵
  PID:2800
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=582 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_pf_pcmpestr_w"
  2⤵
  PID:3000
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=583 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_dg_movss_ibp"
  2⤵
  PID:3316
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=584 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_dg_movss_dbp"
  2⤵
  PID:5540
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=585 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_dg_ss_dr6"
  2⤵
  PID:3592
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=586 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_dg_rf_once"
  2⤵
  PID:5544
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=587 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_dg_rmw_w"
  2⤵
  PID:396
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=588 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_dg_rf_push"
  2⤵
  PID:5072
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=589 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_dff_one_db"
  2⤵
  PID:2740
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=590 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_gr_efer_lma_write"
  2⤵
  PID:2920
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=591 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_gr_pk_shadow_stack"
  2⤵
  PID:4956
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=592 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_gr_int_n_cpl3"
  2⤵
  PID:4480
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=593 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_fb_wruss_ordinary_page"
  2⤵
  PID:5164
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=594 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_hx_lock_priv"
  2⤵
  PID:5600
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=595 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_hx_umwait_disarm"
  2⤵
  PID:5820
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=596 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_hx_vcvtps2ph_fault"
  2⤵
  PID:1788
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=597 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_tg_evex_vcvtps2ph_fault"
  2⤵
  PID:1520
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=598 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ct_moveout_freed"
  2⤵
  PID:2500
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=599 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ct_moveout_dropped"
  2⤵
  PID:4216
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=600 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ct_vmx_tpause_delay"
  2⤵
  PID:1308
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=601 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_ct_rsm_dr6_fixed1"
  2⤵
  PID:4296
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=602 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_kk_max_hypervisor_bit"
  2⤵
  PID:4308
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=603 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_kk_cr0_reserved"
  2⤵
  PID:2312
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=604 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_kk_cr0_combinations"
  2⤵
  PID:2436
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=605 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_kk_cr_paging_64"
  2⤵
  PID:4072
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=606 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_kk_cr_paging_compat"
  2⤵
  PID:2636
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=607 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_kk_cr0_activate"
  2⤵
  PID:3248
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=608 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_kk_cr_mode32"
  2⤵
  PID:2024
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=609 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_kk_cr4_reserved_pcide"
  2⤵
  PID:2848
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=610 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_kk_cr4_profile_hidden"
  2⤵
  PID:4248
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=611 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_kk_cr_vmx_fixed"
  2⤵
  PID:2060
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=612 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_kk_cr_effective"
  2⤵
  PID:2516
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=613 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_kk_cr_context"
  2⤵
  PID:3540
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=614 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_kk_movcr0_bits"
  2⤵
  PID:3324
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=615 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_kk_movcr_paging64"
  2⤵
  PID:5284
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=616 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_kk_movcr_compat"
  2⤵
  PID:4624
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=617 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_kk_movcr_mode32"
  2⤵
  PID:1724
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=618 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_kk_movcr0_activate"
  2⤵
  PID:624
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=619 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_kk_movcr_cpl3_lmsw_clts"
  2⤵
  PID:2008
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=620 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_hb_QEMU64"
  2⤵
  PID:5272
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=621 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_hb_PHENOM"
  2⤵
  PID:3652
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=622 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_hb_CORE2DUO"
  2⤵
  PID:1032
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=623 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_hb_KVM64"
  2⤵
  PID:2484
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=624 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_hb_QEMU32"
  2⤵
  PID:4852
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=625 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_hb_KVM32"
  2⤵
  PID:2988
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=626 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_hb_COREDUO"
  2⤵
  PID:2972
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=627 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_hb_486"
  2⤵
  PID:2904
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=628 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_hb_PENTIUM"
  2⤵
  PID:5092
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=629 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_hb_PENTIUM2"
  2⤵
  PID:4712
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=630 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_hb_PENTIUM3"
  2⤵
  PID:3700
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=631 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_hb_ATHLON"
  2⤵
  PID:4964
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=632 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_hb_N270"
  2⤵
  PID:4844
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=633 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_hb_CONROE"
  2⤵
  PID:720
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=634 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_hb_PENRYN"
  2⤵
  PID:2348
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=635 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_hb_NEHALEM"
  2⤵
  PID:4332
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=636 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_hb_WESTMERE"
  2⤵
  PID:3728
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=637 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_hb_SANDYBRIDGE"
  2⤵
  PID:6008
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=638 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_hb_IVYBRIDGE"
  2⤵
  PID:1660
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=639 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_hb_HASWELL"
  2⤵
  PID:4188
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=640 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_hb_BROADWELL"
  2⤵
  PID:4792
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=641 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_hb_SKYLAKE_CLIENT"
  2⤵
  PID:4836
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=642 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_hb_SKYLAKE_SERVER"
  2⤵
  PID:712
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=643 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_hb_CASCADELAKE_SERVER"
  2⤵
  PID:4556
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=644 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_hb_COOPERLAKE"
  2⤵
  PID:3412
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=645 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_hb_ICELAKE_CLIENT"
  2⤵
  PID:1300
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=646 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_hb_ICELAKE_SERVER"
  2⤵
  PID:4576
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=647 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_hb_DENVERTON"
  2⤵
  PID:4400
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=648 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_hb_SNOWRIDGE"
  2⤵
  PID:2644
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=649 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_hb_KNIGHTSMILL"
  2⤵
  PID:2248
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=650 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_hb_OPTERON_G1"
  2⤵
  PID:5944
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=651 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_hb_OPTERON_G2"
  2⤵
  PID:932
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=652 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_hb_OPTERON_G3"
  2⤵
  PID:2772
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=653 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_hb_OPTERON_G4"
  2⤵
  PID:3716
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=654 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_hb_OPTERON_G5"
  2⤵
  PID:4120
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=655 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_hb_EPYC"
  2⤵
  PID:4080
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=656 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_hb_DHYANA"
  2⤵
  PID:1908
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=657 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_hb_EPYC_ROME"
  2⤵
  PID:5484
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=658 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_hb_MAX"
  2⤵
  PID:4268
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=659 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_hb_model_count"
  2⤵
  PID:2068
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=660 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_kc_cache_models"
  2⤵
  PID:2924
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=661 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_kc_max_profile"
  2⤵
  PID:2744
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=662 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xpg_xor_then_crossing_insn"
  2⤵
  PID:3184
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=663 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_xpg_xor_flags_survive"
  2⤵
  PID:5096
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=664 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_sj_tb_restart_halves"
  2⤵
  PID:5884
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=665 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vc_virtual_rdtsc"
  2⤵
  PID:5620
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=666 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vc_args"
  2⤵
  PID:4560
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=667 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vc_msr_adjust"
  2⤵
  PID:4668
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=668 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vc_context"
  2⤵
  PID:1276
- C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe
  C:\Users\Admin\AppData\Local\Temp\2026-11-01_94cb1b8d2fb390a774eb2e63c9696d3a_coinminer_icedid_luca-stealer_njrat.exe --worker=669 --no-exec --no-summary --verbose=2 --color=always -- "test_x86_vc_pbndkb_seeded"
  2⤵
  PID:5752

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1996-2-0x0000015722A70000-0x0000015722A71000-memory.dmp

Download

memory/1996-3-0x0000015722B40000-0x0000015722F40000-memory.dmp

Download

memory/4352-5-0x000001D3732C0000-0x000001D3732C1000-memory.dmp

Download

memory/4352-6-0x000001D300000000-0x000001D300400000-memory.dmp

Download

memory/4632-7-0x000001D022940000-0x000001D022941000-memory.dmp

Download

memory/5672-4-0x00000220A6860000-0x00000220A6861000-memory.dmp

Download

memory/5820-9-0x0000014CBF290000-0x0000014CBF690000-memory.dmp

Download

memory/5820-8-0x0000014CBF190000-0x0000014CBF191000-memory.dmp

Download

memory/5968-0-0x00000292E7560000-0x00000292E7561000-memory.dmp

Download

memory/5968-1-0x0000029280000000-0x0000029280400000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads