Analysis
- max time kernel
150s - max time network
132s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
04/11/2026, 09:55
Behavioral task
behavioral1
Sample
2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
General
- Target 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.exe
- Size 2.7MB
- Sample261104-lx49qag151
- SHA256 ccc1182245bb858dcec83b7865cc2e315b873e5e52121ed620611d9a3649a9f2
- MD5 b76b8cb37d4a1dcb1c8d2d2197540929
- SHA1 034417ebd52a63dda92c2d2d1feb073e5140f44a
- SHA512 8949bb6d752db1178e26fac432126d002b4c811832f21333d04b8ad2b8bf2e6d4683dd7ae38e8ffb063f87f121fbe19f607acea0a31d3d5924e7dd9f85efcb36
- SSDEEP 49152:BxgGhqFKbutmkO+wAOInO4XrztygxLHkJEJwxgGhqFKbutmkO+wAOInO4Xrztyga:0vs+wE9XDNnvs+wE9XD8
- TLSH T194D5BE13F28150B9D557C231872A6532BB7AB8350B21AAEB67845F213F766E06F3C712
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Detects Shodi worm 2 IoCs
resource yara_rule behavioral2/files/0x001b00000000696b-3.dat family_shodi behavioral2/files/0x000a00000001b86f-67.dat family_shodi - Executes dropped EXE 64 IoCs
pid Process 4268 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 4072 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 3268 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 5864 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 4088 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 5820 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 5056 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 4592 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 4636 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 2384 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 1932 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 4900 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 2752 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 4464 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 5808 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 2656 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 2360 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 1872 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 4192 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 4316 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 1420 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 3644 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 2556 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 2796 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 4404 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 1512 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 6004 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 300 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 248 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 5476 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 3020 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 3688 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 4440 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 592 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 2272 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 4372 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 5140 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 1300 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 1064 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 5072 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 4720 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 3204 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 3624 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 1776 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 1600 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 1488 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 3476 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 4880 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 3320 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 2940 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 4308 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 5204 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 1500 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 2192 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 1780 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 4432 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 1864 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 2804 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 3164 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 5840 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 5516 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 5436 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 5740 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 5424 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa - System Location Discovery: System Language Discovery 1 TTPs 64 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Process not Found - Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 1484 wrote to memory of 4268 1484 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.exe 89 PID 4268 wrote to memory of 4072 4268 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 90 PID 4072 wrote to memory of 3268 4072 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 91 PID 3268 wrote to memory of 5864 3268 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 92 PID 5864 wrote to memory of 4088 5864 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 93 PID 4088 wrote to memory of 5820 4088 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 94 PID 5820 wrote to memory of 5056 5820 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 95 PID 5056 wrote to memory of 4592 5056 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 96 PID 4592 wrote to memory of 4636 4592 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 97 PID 4636 wrote to memory of 2384 4636 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 98 PID 2384 wrote to memory of 1932 2384 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 99 PID 1932 wrote to memory of 4900 1932 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 100 PID 4900 wrote to memory of 2752 4900 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 101 PID 2752 wrote to memory of 4464 2752 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 102 PID 4464 wrote to memory of 5808 4464 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 103 PID 5808 wrote to memory of 2656 5808 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 104 PID 2656 wrote to memory of 2360 2656 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 105 PID 2360 wrote to memory of 1872 2360 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 106 PID 1872 wrote to memory of 4192 1872 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 107 PID 4192 wrote to memory of 4316 4192 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 108 PID 4316 wrote to memory of 1420 4316 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 109 PID 1420 wrote to memory of 3644 1420 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 110 PID 3644 wrote to memory of 2556 3644 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 111 PID 2556 wrote to memory of 2796 2556 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 112 PID 2796 wrote to memory of 4404 2796 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 113 PID 4404 wrote to memory of 1512 4404 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 114 PID 1512 wrote to memory of 6004 1512 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 115 PID 6004 wrote to memory of 300 6004 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 116 PID 300 wrote to memory of 248 300 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 117 PID 248 wrote to memory of 5476 248 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 118 PID 5476 wrote to memory of 3020 5476 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 119 PID 3020 wrote to memory of 3688 3020 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 120 PID 3688 wrote to memory of 4440 3688 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 121 PID 4440 wrote to memory of 592 4440 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 122 PID 592 wrote to memory of 2272 592 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 123 PID 2272 wrote to memory of 4372 2272 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 124 PID 4372 wrote to memory of 5140 4372 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 125 PID 5140 wrote to memory of 1300 5140 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 126 PID 1300 wrote to memory of 1064 1300 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 127 PID 1064 wrote to memory of 5072 1064 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 128 PID 5072 wrote to memory of 4720 5072 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 129 PID 4720 wrote to memory of 3204 4720 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 130 PID 3204 wrote to memory of 3624 3204 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 131 PID 3624 wrote to memory of 1776 3624 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 132 PID 1776 wrote to memory of 1600 1776 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 133 PID 1600 wrote to memory of 1488 1600 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 134 PID 1488 wrote to memory of 3476 1488 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 135 PID 3476 wrote to memory of 4880 3476 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 136 PID 4880 wrote to memory of 3320 4880 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 137 PID 3320 wrote to memory of 2940 3320 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 138 PID 2940 wrote to memory of 4308 2940 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 139 PID 4308 wrote to memory of 5204 4308 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 140 PID 5204 wrote to memory of 1500 5204 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 141 PID 1500 wrote to memory of 2192 1500 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 142 PID 2192 wrote to memory of 1780 2192 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 143 PID 1780 wrote to memory of 4432 1780 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 144 PID 4432 wrote to memory of 1864 4432 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 145 PID 1864 wrote to memory of 2804 1864 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 146 PID 2804 wrote to memory of 3164 2804 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 147 PID 3164 wrote to memory of 5840 3164 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 148 PID 5840 wrote to memory of 5516 5840 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 149 PID 5516 wrote to memory of 5436 5516 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 150 PID 5436 wrote to memory of 5740 5436 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 151 PID 5740 wrote to memory of 5424 5740 2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa 152
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.exe"C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:1484 -
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa2⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4268 -
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa3⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4072 -
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa4⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:3268 -
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa5⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:5864 -
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa6⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4088 -
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa7⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:5820 -
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa8⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:5056 -
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa9⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4592 -
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa10⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4636 -
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa11⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:2384 -
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa12⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:1932 -
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa13⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4900 -
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa14⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:2752 -
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa15⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4464 -
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa16⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:5808 -
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa17⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:2656 -
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa18⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:2360 -
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa19⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:1872 -
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa20⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4192 -
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa21⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4316 -
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa22⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:1420 -
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa23⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:3644 -
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa24⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:2556 -
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa25⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:2796 -
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa26⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4404 -
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa27⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:1512 -
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa28⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:6004 -
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa29⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:300 -
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa30⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:248 -
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa31⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:5476 -
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa32⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:3020 -
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa33⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:3688 -
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa34⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4440 -
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa35⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:592 -
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa36⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:2272 -
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa37⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4372 -
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa38⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:5140 -
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa39⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:1300 -
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa40⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:1064 -
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa41⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:5072 -
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa42⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4720 -
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa43⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:3204 -
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa44⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:3624 -
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa45⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:1776 -
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa46⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:1600 -
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa47⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:1488 -
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa48⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:3476 -
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa49⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4880 -
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa50⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:3320 -
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa51⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:2940 -
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa52⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4308 -
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa53⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:5204 -
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa54⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:1500 -
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa55⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:2192 -
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa56⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:1780 -
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa57⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:4432 -
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa58⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:1864 -
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa59⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:2804 -
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa60⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:3164 -
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa61⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:5840 -
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa62⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:5516 -
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa63⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:5436 -
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa64⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:5740 -
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa65⤵
- Executes dropped EXE
PID:5424 -
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa66⤵PID:6128
-
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa67⤵PID:2372
-
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa68⤵PID:3292
-
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa69⤵PID:4140
-
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa70⤵PID:3844
-
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa71⤵PID:5356
-
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa72⤵PID:576
-
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa73⤵
- System Location Discovery: System Language Discovery
PID:1976 -
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa74⤵PID:3248
-
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa75⤵PID:3224
-
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa76⤵
- System Location Discovery: System Language Discovery
PID:4612 -
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa77⤵PID:724
-
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa78⤵PID:4448
-
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa79⤵PID:2316
-
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa80⤵PID:952
-
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa81⤵PID:3904
-
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa82⤵PID:4260
-
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa83⤵PID:5724
-
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa84⤵PID:6088
-
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa85⤵PID:5556
-
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa86⤵PID:3220
-
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa87⤵
- System Location Discovery: System Language Discovery
PID:3432 -
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa88⤵PID:1632
-
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa89⤵PID:4248
-
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa90⤵PID:764
-
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa91⤵PID:6120
-
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa92⤵PID:5492
-
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa93⤵PID:4416
-
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa94⤵PID:3628
-
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa95⤵PID:2624
-
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa96⤵PID:5252
-
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa97⤵PID:2496
-
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa98⤵PID:5848
-
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa99⤵PID:1008
-
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa100⤵PID:4956
-
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa101⤵PID:3660
-
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa102⤵PID:2744
-
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa103⤵PID:2588
-
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa104⤵PID:4936
-
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa105⤵PID:1432
-
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa106⤵PID:2508
-
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa107⤵PID:5672
-
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa108⤵PID:3212
-
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa109⤵PID:4788
-
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa110⤵PID:4456
-
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa111⤵PID:4768
-
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa112⤵PID:3328
-
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa113⤵PID:5520
-
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa114⤵PID:4336
-
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa115⤵PID:4920
-
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa116⤵PID:1960
-
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa117⤵PID:3152
-
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa118⤵PID:5888
-
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa119⤵PID:3200
-
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa120⤵PID:2520
-
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa121⤵PID:4496
-
C:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usaC:\Users\Admin\AppData\Local\Temp\2026-11-03_b76b8cb37d4a1dcb1c8d2d2197540929_akira_elex_rhadamanthys.usa122⤵PID:1504
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-