Analysis
-
max time kernel
150s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system -
submitted
01-07-2024 08:51
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe
Resource
win7-20240611-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe
Resource
win10v2004-20240508-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe
-
Size
314KB
-
MD5
1aaaf7de2ea20b18d35dcec871b0b356
-
SHA1
ae630f1d5f737ff43ac930be98bd088030c3b5bf
-
SHA256
61a51c000d46333e51b07da6c2b98a3689a0e425446e7acf7aef5eaf6bd6c0de
-
SHA512
755238ac8bf990a0989ab86a816b43a143ea3f07157216fe40952680b2dc667fd56bf9829110329bfd159a1462bfff3f6f22099e59ba0d767edc9dc3f1ab6668
-
SSDEEP
6144:HkO7RN+uJ4N431ggy41BFzsB1XeBaXm8K0ZIYJ4K7ze6F2y1GWG:HL7WuJ/3bJQ1Ka8ozeE2G
Score
5/10
Malware Config
Signatures
-
Suspicious use of SetThreadContext 64 IoCs
description pid Process procid_target PID 1028 set thread context of 1620 1028 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 29 PID 1620 set thread context of 2328 1620 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 31 PID 2328 set thread context of 2708 2328 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 33 PID 2708 set thread context of 2516 2708 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 35 PID 2516 set thread context of 2532 2516 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 37 PID 2532 set thread context of 2560 2532 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 39 PID 2560 set thread context of 1860 2560 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 41 PID 1860 set thread context of 1040 1860 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 43 PID 1040 set thread context of 2404 1040 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 45 PID 2404 set thread context of 2596 2404 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 47 PID 2596 set thread context of 548 2596 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 49 PID 548 set thread context of 3024 548 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 51 PID 3024 set thread context of 3012 3024 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 53 PID 3012 set thread context of 1488 3012 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 55 PID 1488 set thread context of 1384 1488 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 57 PID 1384 set thread context of 1680 1384 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 59 PID 1680 set thread context of 1136 1680 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 61 PID 1136 set thread context of 1924 1136 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 63 PID 1924 set thread context of 1928 1924 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 65 PID 1928 set thread context of 1140 1928 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 67 PID 1140 set thread context of 2156 1140 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 69 PID 2156 set thread context of 1724 2156 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 71 PID 1724 set thread context of 1028 1724 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 73 PID 1028 set thread context of 1700 1028 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 75 PID 1700 set thread context of 2144 1700 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 77 PID 2144 set thread context of 2536 2144 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 79 PID 2536 set thread context of 2620 2536 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 81 PID 2620 set thread context of 2552 2620 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 83 PID 2552 set thread context of 2264 2552 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 85 PID 2264 set thread context of 1008 2264 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 87 PID 1008 set thread context of 2724 1008 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 89 PID 2724 set thread context of 3008 2724 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 91 PID 3008 set thread context of 2068 3008 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 93 PID 2068 set thread context of 1440 2068 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 95 PID 1440 set thread context of 2960 1440 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 97 PID 2960 set thread context of 976 2960 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 99 PID 976 set thread context of 1656 976 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 101 PID 1656 set thread context of 2928 1656 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 103 PID 2928 set thread context of 1660 2928 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 105 PID 1660 set thread context of 876 1660 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 107 PID 876 set thread context of 1584 876 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 109 PID 1584 set thread context of 912 1584 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 111 PID 912 set thread context of 2636 912 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 113 PID 2636 set thread context of 2072 2636 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 115 PID 2072 set thread context of 2312 2072 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 117 PID 2312 set thread context of 2512 2312 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 119 PID 2512 set thread context of 2732 2512 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 121 PID 2732 set thread context of 1872 2732 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 123 PID 1872 set thread context of 756 1872 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 125 PID 756 set thread context of 2756 756 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 127 PID 2756 set thread context of 2252 2756 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 129 PID 2252 set thread context of 1476 2252 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 131 PID 1476 set thread context of 560 1476 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 133 PID 560 set thread context of 1768 560 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 135 PID 1768 set thread context of 1600 1768 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 137 PID 1600 set thread context of 848 1600 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 139 PID 848 set thread context of 556 848 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 141 PID 556 set thread context of 656 556 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 143 PID 656 set thread context of 2284 656 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 145 PID 2284 set thread context of 3036 2284 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 147 PID 3036 set thread context of 2788 3036 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 149 PID 2788 set thread context of 2300 2788 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 151 PID 2300 set thread context of 2580 2300 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 153 PID 2580 set thread context of 2740 2580 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 155 -
Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeDebugPrivilege 1028 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe Token: SeDebugPrivilege 1620 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe Token: SeDebugPrivilege 2328 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe Token: SeDebugPrivilege 2708 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe Token: SeDebugPrivilege 2516 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe Token: SeDebugPrivilege 2532 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe Token: SeDebugPrivilege 2560 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe Token: SeDebugPrivilege 1860 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe Token: SeDebugPrivilege 1040 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe Token: SeDebugPrivilege 2404 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe Token: SeDebugPrivilege 2596 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe Token: SeDebugPrivilege 548 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe Token: SeDebugPrivilege 3024 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe Token: SeDebugPrivilege 3012 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe Token: SeDebugPrivilege 1488 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe Token: SeDebugPrivilege 1384 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe Token: SeDebugPrivilege 1680 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe Token: SeDebugPrivilege 1136 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe Token: SeDebugPrivilege 1924 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe Token: SeDebugPrivilege 1928 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe Token: SeDebugPrivilege 1140 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe Token: SeDebugPrivilege 2156 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe Token: SeDebugPrivilege 1724 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe Token: SeDebugPrivilege 1028 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe Token: SeDebugPrivilege 1700 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe Token: SeDebugPrivilege 2144 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe Token: SeDebugPrivilege 2536 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe Token: SeDebugPrivilege 2620 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe Token: SeDebugPrivilege 2552 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe Token: SeDebugPrivilege 2264 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe Token: SeDebugPrivilege 1008 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe Token: SeDebugPrivilege 2724 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe Token: SeDebugPrivilege 3008 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe Token: SeDebugPrivilege 2068 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe Token: SeDebugPrivilege 1440 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe Token: SeDebugPrivilege 2960 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe Token: SeDebugPrivilege 976 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe Token: SeDebugPrivilege 1656 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe Token: SeDebugPrivilege 2928 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe Token: SeDebugPrivilege 1660 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe Token: SeDebugPrivilege 876 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe Token: SeDebugPrivilege 1584 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe Token: SeDebugPrivilege 912 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe Token: SeDebugPrivilege 2636 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe Token: SeDebugPrivilege 2072 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe Token: SeDebugPrivilege 2312 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe Token: SeDebugPrivilege 2512 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe Token: SeDebugPrivilege 2732 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe Token: SeDebugPrivilege 1872 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe Token: SeDebugPrivilege 756 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe Token: SeDebugPrivilege 2756 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe Token: SeDebugPrivilege 2252 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe Token: SeDebugPrivilege 1476 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe Token: SeDebugPrivilege 560 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe Token: SeDebugPrivilege 1768 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe Token: SeDebugPrivilege 1600 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe Token: SeDebugPrivilege 848 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe Token: SeDebugPrivilege 556 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe Token: SeDebugPrivilege 656 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe Token: SeDebugPrivilege 2284 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe Token: SeDebugPrivilege 3036 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe Token: SeDebugPrivilege 2788 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe Token: SeDebugPrivilege 2300 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe Token: SeDebugPrivilege 2580 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 1028 wrote to memory of 2588 1028 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 28 PID 1028 wrote to memory of 2588 1028 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 28 PID 1028 wrote to memory of 2588 1028 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 28 PID 1028 wrote to memory of 1620 1028 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 29 PID 1028 wrote to memory of 1620 1028 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 29 PID 1028 wrote to memory of 1620 1028 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 29 PID 1028 wrote to memory of 1620 1028 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 29 PID 1028 wrote to memory of 1620 1028 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 29 PID 1028 wrote to memory of 1620 1028 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 29 PID 1028 wrote to memory of 1620 1028 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 29 PID 1028 wrote to memory of 1620 1028 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 29 PID 1028 wrote to memory of 1620 1028 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 29 PID 1028 wrote to memory of 1620 1028 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 29 PID 1620 wrote to memory of 2008 1620 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 30 PID 1620 wrote to memory of 2008 1620 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 30 PID 1620 wrote to memory of 2008 1620 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 30 PID 1620 wrote to memory of 2328 1620 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 31 PID 1620 wrote to memory of 2328 1620 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 31 PID 1620 wrote to memory of 2328 1620 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 31 PID 1620 wrote to memory of 2328 1620 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 31 PID 1620 wrote to memory of 2328 1620 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 31 PID 1620 wrote to memory of 2328 1620 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 31 PID 1620 wrote to memory of 2328 1620 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 31 PID 1620 wrote to memory of 2328 1620 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 31 PID 1620 wrote to memory of 2328 1620 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 31 PID 1620 wrote to memory of 2328 1620 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 31 PID 2328 wrote to memory of 2704 2328 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 32 PID 2328 wrote to memory of 2704 2328 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 32 PID 2328 wrote to memory of 2704 2328 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 32 PID 2328 wrote to memory of 2708 2328 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 33 PID 2328 wrote to memory of 2708 2328 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 33 PID 2328 wrote to memory of 2708 2328 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 33 PID 2328 wrote to memory of 2708 2328 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 33 PID 2328 wrote to memory of 2708 2328 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 33 PID 2328 wrote to memory of 2708 2328 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 33 PID 2328 wrote to memory of 2708 2328 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 33 PID 2328 wrote to memory of 2708 2328 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 33 PID 2328 wrote to memory of 2708 2328 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 33 PID 2328 wrote to memory of 2708 2328 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 33 PID 2708 wrote to memory of 2816 2708 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 34 PID 2708 wrote to memory of 2816 2708 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 34 PID 2708 wrote to memory of 2816 2708 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 34 PID 2708 wrote to memory of 2516 2708 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 35 PID 2708 wrote to memory of 2516 2708 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 35 PID 2708 wrote to memory of 2516 2708 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 35 PID 2708 wrote to memory of 2516 2708 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 35 PID 2708 wrote to memory of 2516 2708 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 35 PID 2708 wrote to memory of 2516 2708 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 35 PID 2708 wrote to memory of 2516 2708 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 35 PID 2708 wrote to memory of 2516 2708 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 35 PID 2708 wrote to memory of 2516 2708 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 35 PID 2708 wrote to memory of 2516 2708 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 35 PID 2516 wrote to memory of 2876 2516 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 36 PID 2516 wrote to memory of 2876 2516 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 36 PID 2516 wrote to memory of 2876 2516 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 36 PID 2516 wrote to memory of 2532 2516 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 37 PID 2516 wrote to memory of 2532 2516 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 37 PID 2516 wrote to memory of 2532 2516 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 37 PID 2516 wrote to memory of 2532 2516 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 37 PID 2516 wrote to memory of 2532 2516 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 37 PID 2516 wrote to memory of 2532 2516 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 37 PID 2516 wrote to memory of 2532 2516 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 37 PID 2516 wrote to memory of 2532 2516 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 37 PID 2516 wrote to memory of 2532 2516 1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe 37
Processes
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe"1⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:1028 -
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe2⤵PID:2588
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe2⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:1620 -
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe3⤵PID:2008
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe3⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:2328 -
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe4⤵PID:2704
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe4⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:2708 -
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe5⤵PID:2816
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe5⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:2516 -
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe6⤵PID:2876
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe6⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
PID:2532 -
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe7⤵PID:2528
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe7⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
PID:2560 -
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe8⤵PID:1852
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe8⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
PID:1860 -
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe9⤵PID:1932
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe9⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
PID:1040 -
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe10⤵PID:1848
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe10⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
PID:2404 -
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe11⤵PID:2576
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe11⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
PID:2596 -
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe12⤵PID:812
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe12⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
PID:548 -
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe13⤵PID:2844
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe13⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
PID:3024 -
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe14⤵PID:1672
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe14⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
PID:3012 -
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe15⤵PID:2104
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe15⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
PID:1488 -
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe16⤵PID:1828
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe16⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
PID:1384 -
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe17⤵PID:2492
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe17⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
PID:1680 -
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe18⤵PID:836
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe18⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
PID:1136 -
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe19⤵PID:2064
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe19⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
PID:1924 -
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe20⤵PID:2936
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe20⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
PID:1928 -
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe21⤵PID:2140
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe21⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
PID:1140 -
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe22⤵PID:3068
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe22⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
PID:2156 -
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe23⤵PID:1996
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe23⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
PID:1724 -
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe24⤵PID:1720
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe24⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
PID:1028 -
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe25⤵PID:2616
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe25⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
PID:1700 -
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe26⤵PID:1620
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe26⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
PID:2144 -
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe27⤵PID:2840
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe27⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
PID:2536 -
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe28⤵PID:2780
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe28⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
PID:2620 -
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe29⤵PID:2524
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe29⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
PID:2552 -
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe30⤵PID:1032
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe30⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
PID:2264 -
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe31⤵PID:1860
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe31⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
PID:1008 -
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe32⤵PID:1108
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe32⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
PID:2724 -
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe33⤵PID:328
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe33⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
PID:3008 -
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe34⤵PID:2280
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe34⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
PID:2068 -
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe35⤵PID:780
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe35⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
PID:1440 -
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe36⤵PID:476
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe36⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
PID:2960 -
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe37⤵PID:1080
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe37⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
PID:976 -
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe38⤵PID:1296
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe38⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
PID:1656 -
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe39⤵PID:1240
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe39⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
PID:2928 -
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe40⤵PID:708
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe40⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
PID:1660 -
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe41⤵PID:2924
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe41⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
PID:876 -
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe42⤵PID:2408
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe42⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
PID:1584 -
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe43⤵PID:2244
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe43⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
PID:912 -
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe44⤵PID:1640
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe44⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
PID:2636 -
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe45⤵PID:2612
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe45⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
PID:2072 -
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe46⤵PID:2784
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe46⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
PID:2312 -
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe47⤵PID:2424
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe47⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
PID:2512 -
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe48⤵PID:2344
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe48⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
PID:2732 -
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe49⤵PID:1256
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe49⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
PID:1872 -
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe50⤵PID:1764
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe50⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
PID:756 -
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe51⤵PID:2772
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe51⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
PID:2756 -
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe52⤵PID:2864
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe52⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
PID:2252 -
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe53⤵PID:3004
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe53⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
PID:1476 -
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe54⤵PID:264
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe54⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
PID:560 -
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe55⤵PID:1732
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe55⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
PID:1768 -
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe56⤵PID:1756
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe56⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
PID:1600 -
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe57⤵PID:884
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe57⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
PID:848 -
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe58⤵PID:2940
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe58⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
PID:556 -
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe59⤵PID:1144
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe59⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
PID:656 -
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe60⤵PID:1496
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe60⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
PID:2284 -
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe61⤵PID:1592
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe61⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
PID:3036 -
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe62⤵PID:2908
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe62⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
PID:2788 -
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe63⤵PID:2636
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe63⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
PID:2300 -
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe64⤵PID:2584
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe64⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
PID:2580 -
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe65⤵PID:2532
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe65⤵PID:2740
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe66⤵PID:1244
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe66⤵PID:1236
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe67⤵PID:880
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe67⤵PID:1804
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe68⤵PID:1740
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe68⤵PID:1008
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe69⤵PID:1020
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe69⤵PID:2052
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe70⤵PID:2252
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe70⤵PID:3012
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe71⤵PID:2920
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe71⤵PID:680
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe72⤵PID:784
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe72⤵PID:1388
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe73⤵PID:568
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe73⤵PID:788
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe74⤵PID:928
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe74⤵PID:1600
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe75⤵PID:848
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe75⤵PID:1500
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe76⤵PID:2096
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe76⤵PID:1696
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe77⤵PID:2248
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe77⤵PID:2196
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe78⤵PID:2828
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe78⤵PID:1664
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe79⤵PID:2708
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe79⤵PID:2820
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe80⤵PID:2072
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe80⤵PID:2980
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe81⤵PID:2692
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe81⤵PID:2512
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe82⤵PID:2484
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe82⤵PID:1596
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe83⤵PID:1236
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe83⤵PID:756
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe84⤵PID:676
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe84⤵PID:3016
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe85⤵PID:632
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe85⤵PID:1780
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe86⤵PID:1480
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe86⤵PID:1468
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe87⤵PID:2332
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe87⤵PID:612
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe88⤵PID:2044
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe88⤵PID:2088
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe89⤵PID:2364
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe89⤵PID:2148
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe90⤵PID:2376
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe90⤵PID:2888
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe91⤵PID:1500
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe91⤵PID:2188
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe92⤵PID:2656
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe92⤵PID:2220
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe93⤵PID:2544
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe93⤵PID:2556
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe94⤵PID:2144
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe94⤵PID:316
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe95⤵PID:2036
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe95⤵PID:2568
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe96⤵PID:2572
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe96⤵PID:2996
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe97⤵PID:2740
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe97⤵PID:1772
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe98⤵PID:2872
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe98⤵PID:756
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe99⤵PID:3016
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe99⤵PID:1992
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe100⤵PID:1948
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe100⤵PID:2776
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe101⤵PID:1896
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe101⤵PID:1388
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe102⤵PID:1608
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe102⤵PID:1504
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe103⤵PID:656
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe103⤵PID:900
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe104⤵PID:1140
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe104⤵PID:2964
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe105⤵PID:1696
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe105⤵PID:2928
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe106⤵PID:2600
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe106⤵PID:2328
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe107⤵PID:2412
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe107⤵PID:1880
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe108⤵PID:2860
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe108⤵PID:352
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe109⤵PID:1596
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe109⤵PID:536
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe110⤵PID:2752
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe110⤵PID:1516
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe111⤵PID:668
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe111⤵PID:3020
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe112⤵PID:2480
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe112⤵PID:1120
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe113⤵PID:1356
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe113⤵PID:1680
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe114⤵PID:2204
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe114⤵PID:1388
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe115⤵PID:1504
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe115⤵PID:1188
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe116⤵PID:3036
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe116⤵PID:2628
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe117⤵PID:2972
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe117⤵PID:2824
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe118⤵PID:1252
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe118⤵PID:2992
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe119⤵PID:2620
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe119⤵PID:2556
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe120⤵PID:2684
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe120⤵PID:1040
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe121⤵PID:1772
-
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe121⤵PID:536
-
C:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\1aaaf7de2ea20b18d35dcec871b0b356_JaffaCakes118.exe122⤵PID:1516
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-