Analysis
-
max time kernel
15s -
max time network
19s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
20-08-2024 19:55
Static task
static1
Behavioral task
behavioral1
Sample
b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe
-
Size
6KB
-
MD5
b09c7777e40e9284fe76d7f0a58872e4
-
SHA1
92b6523a623833a1e712c0de0759c0e4d3093549
-
SHA256
150ea33be12dfbd6b608bd16b35c68914940adf8792b1edd31903e287923adf5
-
SHA512
6492d9ec32aa1e5ec7440573a5937ef767e9c0577e5b6e152ebdd522bbe04e284d9907f3e83d0c15c45d79c8664e5dbe7ffd550a50b1e80e555d10f5a2e4588c
-
SSDEEP
96:Qs+nFQtTXC4gFetn/0Qr3J2ZtQX7jQhV8:Qs+FB4gctvgmrE
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 64 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 2268 wrote to memory of 2088 2268 b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe 30 PID 2268 wrote to memory of 2088 2268 b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe 30 PID 2268 wrote to memory of 2088 2268 b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe 30 PID 2268 wrote to memory of 2088 2268 b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe 30 PID 2088 wrote to memory of 2848 2088 b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe 31 PID 2088 wrote to memory of 2848 2088 b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe 31 PID 2088 wrote to memory of 2848 2088 b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe 31 PID 2088 wrote to memory of 2848 2088 b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe 31 PID 2848 wrote to memory of 3000 2848 b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe 32 PID 2848 wrote to memory of 3000 2848 b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe 32 PID 2848 wrote to memory of 3000 2848 b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe 32 PID 2848 wrote to memory of 3000 2848 b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe 32 PID 3000 wrote to memory of 2148 3000 b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe 33 PID 3000 wrote to memory of 2148 3000 b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe 33 PID 3000 wrote to memory of 2148 3000 b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe 33 PID 3000 wrote to memory of 2148 3000 b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe 33 PID 2148 wrote to memory of 2820 2148 b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe 34 PID 2148 wrote to memory of 2820 2148 b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe 34 PID 2148 wrote to memory of 2820 2148 b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe 34 PID 2148 wrote to memory of 2820 2148 b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe 34 PID 2820 wrote to memory of 2996 2820 b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe 35 PID 2820 wrote to memory of 2996 2820 b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe 35 PID 2820 wrote to memory of 2996 2820 b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe 35 PID 2820 wrote to memory of 2996 2820 b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe 35 PID 2996 wrote to memory of 2908 2996 b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe 36 PID 2996 wrote to memory of 2908 2996 b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe 36 PID 2996 wrote to memory of 2908 2996 b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe 36 PID 2996 wrote to memory of 2908 2996 b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe 36 PID 2908 wrote to memory of 2720 2908 b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe 37 PID 2908 wrote to memory of 2720 2908 b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe 37 PID 2908 wrote to memory of 2720 2908 b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe 37 PID 2908 wrote to memory of 2720 2908 b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe 37 PID 2720 wrote to memory of 2340 2720 b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe 38 PID 2720 wrote to memory of 2340 2720 b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe 38 PID 2720 wrote to memory of 2340 2720 b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe 38 PID 2720 wrote to memory of 2340 2720 b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe 38 PID 2340 wrote to memory of 2420 2340 b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe 39 PID 2340 wrote to memory of 2420 2340 b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe 39 PID 2340 wrote to memory of 2420 2340 b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe 39 PID 2340 wrote to memory of 2420 2340 b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe 39 PID 2420 wrote to memory of 1200 2420 b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe 40 PID 2420 wrote to memory of 1200 2420 b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe 40 PID 2420 wrote to memory of 1200 2420 b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe 40 PID 2420 wrote to memory of 1200 2420 b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe 40 PID 1200 wrote to memory of 2344 1200 b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe 41 PID 1200 wrote to memory of 2344 1200 b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe 41 PID 1200 wrote to memory of 2344 1200 b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe 41 PID 1200 wrote to memory of 2344 1200 b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe 41 PID 2344 wrote to memory of 1188 2344 b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe 42 PID 2344 wrote to memory of 1188 2344 b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe 42 PID 2344 wrote to memory of 1188 2344 b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe 42 PID 2344 wrote to memory of 1188 2344 b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe 42 PID 1188 wrote to memory of 1928 1188 b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe 43 PID 1188 wrote to memory of 1928 1188 b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe 43 PID 1188 wrote to memory of 1928 1188 b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe 43 PID 1188 wrote to memory of 1928 1188 b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe 43 PID 1928 wrote to memory of 2272 1928 b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe 44 PID 1928 wrote to memory of 2272 1928 b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe 44 PID 1928 wrote to memory of 2272 1928 b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe 44 PID 1928 wrote to memory of 2272 1928 b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe 44 PID 2272 wrote to memory of 3028 2272 b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe 45 PID 2272 wrote to memory of 3028 2272 b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe 45 PID 2272 wrote to memory of 3028 2272 b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe 45 PID 2272 wrote to memory of 3028 2272 b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe 45
Processes
-
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:2268 -
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"2⤵
- Suspicious use of WriteProcessMemory
PID:2088 -
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"3⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:2848 -
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"4⤵
- Suspicious use of WriteProcessMemory
PID:3000 -
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"5⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:2148 -
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"6⤵
- Suspicious use of WriteProcessMemory
PID:2820 -
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"7⤵
- Suspicious use of WriteProcessMemory
PID:2996 -
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"8⤵
- Suspicious use of WriteProcessMemory
PID:2908 -
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"9⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:2720 -
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"10⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:2340 -
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"11⤵
- Suspicious use of WriteProcessMemory
PID:2420 -
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"12⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:1200 -
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"13⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:2344 -
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"14⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:1188 -
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"15⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:1928 -
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"16⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:2272 -
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"17⤵
- System Location Discovery: System Language Discovery
PID:3028 -
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"18⤵
- System Location Discovery: System Language Discovery
PID:528 -
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"19⤵PID:3024
-
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"20⤵
- System Location Discovery: System Language Discovery
PID:708 -
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"21⤵PID:2928
-
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"22⤵
- System Location Discovery: System Language Discovery
PID:3068 -
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"23⤵PID:2292
-
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"24⤵PID:2008
-
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"25⤵PID:1688
-
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"26⤵
- System Location Discovery: System Language Discovery
PID:2140 -
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"27⤵PID:2200
-
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"28⤵
- System Location Discovery: System Language Discovery
PID:2188 -
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"29⤵
- System Location Discovery: System Language Discovery
PID:2104 -
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"30⤵PID:2404
-
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"31⤵
- System Location Discovery: System Language Discovery
PID:2408 -
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"32⤵
- System Location Discovery: System Language Discovery
PID:2004 -
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"33⤵PID:904
-
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"34⤵
- System Location Discovery: System Language Discovery
PID:2676 -
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"35⤵
- System Location Discovery: System Language Discovery
PID:1720 -
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"36⤵
- System Location Discovery: System Language Discovery
PID:1888 -
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"37⤵
- System Location Discovery: System Language Discovery
PID:1644 -
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"38⤵
- System Location Discovery: System Language Discovery
PID:756 -
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"39⤵PID:1624
-
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"40⤵
- System Location Discovery: System Language Discovery
PID:572 -
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"41⤵
- System Location Discovery: System Language Discovery
PID:1932 -
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"42⤵
- System Location Discovery: System Language Discovery
PID:1308 -
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"43⤵PID:2436
-
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"44⤵
- System Location Discovery: System Language Discovery
PID:324 -
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"45⤵PID:1080
-
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"46⤵PID:2348
-
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"47⤵
- System Location Discovery: System Language Discovery
PID:1236 -
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"48⤵
- System Location Discovery: System Language Discovery
PID:1968 -
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"49⤵
- System Location Discovery: System Language Discovery
PID:1680 -
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"50⤵PID:2988
-
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"51⤵PID:2916
-
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"52⤵
- System Location Discovery: System Language Discovery
PID:2384 -
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"53⤵PID:1780
-
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"54⤵
- System Location Discovery: System Language Discovery
PID:2900 -
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"55⤵PID:2256
-
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"56⤵PID:2216
-
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"57⤵PID:1528
-
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"58⤵
- System Location Discovery: System Language Discovery
PID:1652 -
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"59⤵
- System Location Discovery: System Language Discovery
PID:2660 -
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"60⤵PID:672
-
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"61⤵
- System Location Discovery: System Language Discovery
PID:2548 -
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"62⤵
- System Location Discovery: System Language Discovery
PID:1876 -
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"63⤵
- System Location Discovery: System Language Discovery
PID:2124 -
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"64⤵
- System Location Discovery: System Language Discovery
PID:744 -
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"65⤵
- System Location Discovery: System Language Discovery
PID:2372 -
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"66⤵PID:1712
-
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"67⤵
- System Location Discovery: System Language Discovery
PID:3084 -
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"68⤵
- System Location Discovery: System Language Discovery
PID:3116 -
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"69⤵
- System Location Discovery: System Language Discovery
PID:3144 -
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"70⤵
- System Location Discovery: System Language Discovery
PID:3172 -
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"71⤵
- System Location Discovery: System Language Discovery
PID:3204 -
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"72⤵PID:3236
-
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"73⤵
- System Location Discovery: System Language Discovery
PID:3268 -
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"74⤵
- System Location Discovery: System Language Discovery
PID:3304 -
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"75⤵PID:3336
-
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"76⤵PID:3360
-
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"77⤵
- System Location Discovery: System Language Discovery
PID:3392 -
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"78⤵PID:3416
-
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"79⤵
- System Location Discovery: System Language Discovery
PID:3460 -
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"80⤵PID:3488
-
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"81⤵PID:3520
-
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"82⤵PID:3544
-
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"83⤵
- System Location Discovery: System Language Discovery
PID:3584 -
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"84⤵PID:3612
-
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"85⤵PID:3648
-
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"86⤵PID:3680
-
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"87⤵PID:3708
-
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"88⤵PID:3732
-
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"89⤵
- System Location Discovery: System Language Discovery
PID:3772 -
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"90⤵
- System Location Discovery: System Language Discovery
PID:3796 -
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"91⤵
- System Location Discovery: System Language Discovery
PID:3832 -
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"92⤵PID:3860
-
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"93⤵
- System Location Discovery: System Language Discovery
PID:3892 -
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"94⤵
- System Location Discovery: System Language Discovery
PID:3920 -
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"95⤵
- System Location Discovery: System Language Discovery
PID:3952 -
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"96⤵PID:3984
-
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"97⤵
- System Location Discovery: System Language Discovery
PID:4012 -
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"98⤵PID:4036
-
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"99⤵
- System Location Discovery: System Language Discovery
PID:4076 -
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"100⤵
- System Location Discovery: System Language Discovery
PID:3096 -
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"101⤵
- System Location Discovery: System Language Discovery
PID:3216 -
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"102⤵
- System Location Discovery: System Language Discovery
PID:3348 -
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"103⤵
- System Location Discovery: System Language Discovery
PID:3468 -
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"104⤵
- System Location Discovery: System Language Discovery
PID:3592 -
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"105⤵
- System Location Discovery: System Language Discovery
PID:3716 -
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"106⤵PID:3784
-
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"107⤵PID:3904
-
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"108⤵
- System Location Discovery: System Language Discovery
PID:3992 -
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"109⤵PID:3252
-
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"110⤵PID:3528
-
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"111⤵PID:4044
-
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"112⤵PID:4100
-
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"113⤵PID:4136
-
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"114⤵PID:4160
-
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"115⤵PID:4196
-
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"116⤵PID:4228
-
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"117⤵PID:4260
-
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"118⤵PID:4284
-
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"119⤵PID:4324
-
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"120⤵PID:4352
-
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"121⤵PID:4380
-
C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b09c7777e40e9284fe76d7f0a58872e4_JaffaCakes118.exe"122⤵PID:4412
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-