Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
40s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
12/07/2024, 12:36
Static task
static1
Behavioral task
behavioral1
Sample
3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe
-
Size
44KB
-
MD5
3d66e156658713079b042d9ff456a45f
-
SHA1
601d41859b1ffa518e8b636f1ca7fce1112d79e8
-
SHA256
51ffed9823ca26f3a2087b01bb8a643416df7ddf8a4f41e01cf2855b25b29396
-
SHA512
f92c8c5b023fb224f9f34521daf9a08a9b32007fe5ecf4b2c7a49f06ed34b18b4965506ef3b141ff94339e9419f5816625522982374849cff631a0996dad8a2a
-
SSDEEP
768:SGhzQb4u4HzLOW5loZtynGhzQb4u4HzLOW5l:SQzS4nHzLv2ZtynQzS4nHzLv
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 2688 wrote to memory of 2928 2688 3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe 30 PID 2688 wrote to memory of 2928 2688 3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe 30 PID 2688 wrote to memory of 2928 2688 3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe 30 PID 2688 wrote to memory of 2928 2688 3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe 30 PID 2928 wrote to memory of 2336 2928 3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe 31 PID 2928 wrote to memory of 2336 2928 3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe 31 PID 2928 wrote to memory of 2336 2928 3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe 31 PID 2928 wrote to memory of 2336 2928 3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe 31 PID 2336 wrote to memory of 2892 2336 3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe 32 PID 2336 wrote to memory of 2892 2336 3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe 32 PID 2336 wrote to memory of 2892 2336 3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe 32 PID 2336 wrote to memory of 2892 2336 3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe 32 PID 2892 wrote to memory of 2596 2892 3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe 33 PID 2892 wrote to memory of 2596 2892 3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe 33 PID 2892 wrote to memory of 2596 2892 3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe 33 PID 2892 wrote to memory of 2596 2892 3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe 33 PID 2596 wrote to memory of 2616 2596 3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe 34 PID 2596 wrote to memory of 2616 2596 3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe 34 PID 2596 wrote to memory of 2616 2596 3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe 34 PID 2596 wrote to memory of 2616 2596 3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe 34 PID 2616 wrote to memory of 1256 2616 3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe 35 PID 2616 wrote to memory of 1256 2616 3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe 35 PID 2616 wrote to memory of 1256 2616 3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe 35 PID 2616 wrote to memory of 1256 2616 3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe 35 PID 1256 wrote to memory of 2520 1256 3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe 36 PID 1256 wrote to memory of 2520 1256 3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe 36 PID 1256 wrote to memory of 2520 1256 3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe 36 PID 1256 wrote to memory of 2520 1256 3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe 36 PID 2520 wrote to memory of 2180 2520 3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe 37 PID 2520 wrote to memory of 2180 2520 3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe 37 PID 2520 wrote to memory of 2180 2520 3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe 37 PID 2520 wrote to memory of 2180 2520 3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe 37 PID 2180 wrote to memory of 2876 2180 3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe 38 PID 2180 wrote to memory of 2876 2180 3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe 38 PID 2180 wrote to memory of 2876 2180 3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe 38 PID 2180 wrote to memory of 2876 2180 3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe 38 PID 2876 wrote to memory of 2128 2876 3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe 39 PID 2876 wrote to memory of 2128 2876 3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe 39 PID 2876 wrote to memory of 2128 2876 3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe 39 PID 2876 wrote to memory of 2128 2876 3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe 39 PID 2128 wrote to memory of 2972 2128 3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe 40 PID 2128 wrote to memory of 2972 2128 3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe 40 PID 2128 wrote to memory of 2972 2128 3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe 40 PID 2128 wrote to memory of 2972 2128 3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe 40 PID 2972 wrote to memory of 2828 2972 3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe 41 PID 2972 wrote to memory of 2828 2972 3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe 41 PID 2972 wrote to memory of 2828 2972 3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe 41 PID 2972 wrote to memory of 2828 2972 3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe 41 PID 2828 wrote to memory of 772 2828 3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe 42 PID 2828 wrote to memory of 772 2828 3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe 42 PID 2828 wrote to memory of 772 2828 3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe 42 PID 2828 wrote to memory of 772 2828 3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe 42 PID 772 wrote to memory of 2096 772 3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe 43 PID 772 wrote to memory of 2096 772 3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe 43 PID 772 wrote to memory of 2096 772 3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe 43 PID 772 wrote to memory of 2096 772 3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe 43 PID 2096 wrote to memory of 2280 2096 3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe 44 PID 2096 wrote to memory of 2280 2096 3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe 44 PID 2096 wrote to memory of 2280 2096 3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe 44 PID 2096 wrote to memory of 2280 2096 3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe 44 PID 2280 wrote to memory of 328 2280 3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe 45 PID 2280 wrote to memory of 328 2280 3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe 45 PID 2280 wrote to memory of 328 2280 3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe 45 PID 2280 wrote to memory of 328 2280 3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe 45
Processes
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:2688 -
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"2⤵
- Suspicious use of WriteProcessMemory
PID:2928 -
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"3⤵
- Suspicious use of WriteProcessMemory
PID:2336 -
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"4⤵
- Suspicious use of WriteProcessMemory
PID:2892 -
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"5⤵
- Suspicious use of WriteProcessMemory
PID:2596 -
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"6⤵
- Suspicious use of WriteProcessMemory
PID:2616 -
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"7⤵
- Suspicious use of WriteProcessMemory
PID:1256 -
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"8⤵
- Suspicious use of WriteProcessMemory
PID:2520 -
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"9⤵
- Suspicious use of WriteProcessMemory
PID:2180 -
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"10⤵
- Suspicious use of WriteProcessMemory
PID:2876 -
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"11⤵
- Suspicious use of WriteProcessMemory
PID:2128 -
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"12⤵
- Suspicious use of WriteProcessMemory
PID:2972 -
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"13⤵
- Suspicious use of WriteProcessMemory
PID:2828 -
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"14⤵
- Suspicious use of WriteProcessMemory
PID:772 -
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"15⤵
- Suspicious use of WriteProcessMemory
PID:2096 -
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"16⤵
- Suspicious use of WriteProcessMemory
PID:2280 -
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"17⤵PID:328
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"18⤵PID:864
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"19⤵PID:872
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"20⤵PID:1572
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"21⤵PID:1956
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"22⤵PID:2624
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"23⤵PID:612
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"24⤵PID:2212
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"25⤵PID:1476
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"26⤵PID:2900
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"27⤵PID:1644
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"28⤵PID:2068
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"29⤵PID:1508
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"30⤵PID:2720
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"31⤵PID:2892
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"32⤵PID:2760
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"33⤵PID:2616
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"34⤵PID:916
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"35⤵PID:2136
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"36⤵PID:2204
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"37⤵PID:1568
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"38⤵PID:2844
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"39⤵PID:2232
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"40⤵PID:1420
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"41⤵PID:2100
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"42⤵PID:2320
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"43⤵PID:1844
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"44⤵PID:1636
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"45⤵PID:560
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"46⤵PID:2192
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"47⤵PID:1712
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"48⤵PID:1040
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"49⤵PID:840
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"50⤵PID:672
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"51⤵PID:1432
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"52⤵PID:2436
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"53⤵PID:2744
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"54⤵PID:2688
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"55⤵PID:2824
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"56⤵PID:1508
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"57⤵PID:2536
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"58⤵PID:2016
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"59⤵PID:1100
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"60⤵PID:2164
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"61⤵PID:2644
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"62⤵PID:2768
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"63⤵PID:2184
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"64⤵PID:2604
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"65⤵PID:2120
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"66⤵PID:904
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"67⤵PID:2200
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"68⤵PID:2228
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"69⤵PID:2092
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"70⤵PID:1964
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"71⤵PID:1624
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"72⤵PID:1636
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"73⤵PID:1880
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"74⤵PID:2628
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"75⤵PID:1896
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"76⤵PID:792
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"77⤵PID:524
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"78⤵PID:2432
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"79⤵PID:896
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"80⤵PID:1852
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"81⤵PID:3012
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"82⤵PID:2916
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"83⤵PID:2596
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"84⤵PID:1856
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"85⤵PID:2360
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"86⤵PID:444
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"87⤵PID:1100
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"88⤵PID:3004
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"89⤵PID:2064
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"90⤵PID:1600
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"91⤵PID:2508
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"92⤵PID:1576
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"93⤵PID:992
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"94⤵PID:2036
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"95⤵PID:2340
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"96⤵PID:2200
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"97⤵PID:3040
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"98⤵PID:1988
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"99⤵PID:2504
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"100⤵PID:1624
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"101⤵PID:2512
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"102⤵PID:1904
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"103⤵PID:2628
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"104⤵PID:1588
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"105⤵PID:792
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"106⤵PID:672
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"107⤵PID:2772
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"108⤵PID:896
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"109⤵PID:2808
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"110⤵PID:3012
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"111⤵PID:2916
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"112⤵PID:1912
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"113⤵PID:2872
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"114⤵PID:2360
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"115⤵PID:2932
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"116⤵PID:2308
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"117⤵PID:2644
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"118⤵PID:2640
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"119⤵PID:2844
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"120⤵PID:2132
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"121⤵PID:2948
-
C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\3d66e156658713079b042d9ff456a45f_JaffaCakes118.exe"122⤵PID:2604
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-