Analysis
-
max time kernel
142s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
21-08-2024 13:14
Static task
static1
Behavioral task
behavioral1
Sample
b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe
-
Size
897KB
-
MD5
b39838fbc2ad08718f1a6a5a6348e9d6
-
SHA1
e1163c2b3c84f107ec2385a7414312ebf8b5ad0e
-
SHA256
8de9fbbb2473e6a0fccf2a604bdd7a9bc770f65890a4b01eda632ac1852029a1
-
SHA512
30ae79510022290e685c09f787d77ba42a840bf7014c2eb244193c2772ce7c5d823462455eadc6815cf8f4559b43cc11c1958f0622d628d1d7dfd6eb655e940a
-
SSDEEP
12288:Z0oQRsVUoS1TNFvfjBdDPS6TdauPQYCuu1IshXzlGdv1BsHT0NbsuC:+fRPh1xFvbbD/Y1ws1zSv1BsHT0NIX
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 64 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 2168 wrote to memory of 1524 2168 b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe 31 PID 2168 wrote to memory of 1524 2168 b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe 31 PID 2168 wrote to memory of 1524 2168 b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe 31 PID 2168 wrote to memory of 1524 2168 b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe 31 PID 1524 wrote to memory of 3020 1524 b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe 32 PID 1524 wrote to memory of 3020 1524 b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe 32 PID 1524 wrote to memory of 3020 1524 b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe 32 PID 1524 wrote to memory of 3020 1524 b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe 32 PID 3020 wrote to memory of 2700 3020 b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe 33 PID 3020 wrote to memory of 2700 3020 b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe 33 PID 3020 wrote to memory of 2700 3020 b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe 33 PID 3020 wrote to memory of 2700 3020 b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe 33 PID 2700 wrote to memory of 2880 2700 b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe 34 PID 2700 wrote to memory of 2880 2700 b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe 34 PID 2700 wrote to memory of 2880 2700 b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe 34 PID 2700 wrote to memory of 2880 2700 b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe 34 PID 2880 wrote to memory of 2680 2880 b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe 35 PID 2880 wrote to memory of 2680 2880 b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe 35 PID 2880 wrote to memory of 2680 2880 b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe 35 PID 2880 wrote to memory of 2680 2880 b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe 35 PID 2680 wrote to memory of 2576 2680 b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe 36 PID 2680 wrote to memory of 2576 2680 b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe 36 PID 2680 wrote to memory of 2576 2680 b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe 36 PID 2680 wrote to memory of 2576 2680 b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe 36 PID 2576 wrote to memory of 1484 2576 b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe 37 PID 2576 wrote to memory of 1484 2576 b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe 37 PID 2576 wrote to memory of 1484 2576 b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe 37 PID 2576 wrote to memory of 1484 2576 b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe 37 PID 1484 wrote to memory of 1356 1484 b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe 38 PID 1484 wrote to memory of 1356 1484 b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe 38 PID 1484 wrote to memory of 1356 1484 b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe 38 PID 1484 wrote to memory of 1356 1484 b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe 38 PID 1356 wrote to memory of 1684 1356 b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe 39 PID 1356 wrote to memory of 1684 1356 b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe 39 PID 1356 wrote to memory of 1684 1356 b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe 39 PID 1356 wrote to memory of 1684 1356 b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe 39 PID 1684 wrote to memory of 1576 1684 b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe 40 PID 1684 wrote to memory of 1576 1684 b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe 40 PID 1684 wrote to memory of 1576 1684 b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe 40 PID 1684 wrote to memory of 1576 1684 b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe 40 PID 1576 wrote to memory of 1820 1576 b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe 41 PID 1576 wrote to memory of 1820 1576 b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe 41 PID 1576 wrote to memory of 1820 1576 b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe 41 PID 1576 wrote to memory of 1820 1576 b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe 41 PID 1820 wrote to memory of 2940 1820 b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe 42 PID 1820 wrote to memory of 2940 1820 b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe 42 PID 1820 wrote to memory of 2940 1820 b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe 42 PID 1820 wrote to memory of 2940 1820 b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe 42 PID 2940 wrote to memory of 2440 2940 b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe 43 PID 2940 wrote to memory of 2440 2940 b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe 43 PID 2940 wrote to memory of 2440 2940 b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe 43 PID 2940 wrote to memory of 2440 2940 b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe 43 PID 2440 wrote to memory of 1376 2440 b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe 44 PID 2440 wrote to memory of 1376 2440 b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe 44 PID 2440 wrote to memory of 1376 2440 b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe 44 PID 2440 wrote to memory of 1376 2440 b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe 44 PID 1376 wrote to memory of 2104 1376 b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe 45 PID 1376 wrote to memory of 2104 1376 b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe 45 PID 1376 wrote to memory of 2104 1376 b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe 45 PID 1376 wrote to memory of 2104 1376 b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe 45 PID 2104 wrote to memory of 1432 2104 b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe 46 PID 2104 wrote to memory of 1432 2104 b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe 46 PID 2104 wrote to memory of 1432 2104 b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe 46 PID 2104 wrote to memory of 1432 2104 b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe 46
Processes
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:2168 -
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"2⤵
- Suspicious use of WriteProcessMemory
PID:1524 -
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"3⤵
- Suspicious use of WriteProcessMemory
PID:3020 -
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"4⤵
- Suspicious use of WriteProcessMemory
PID:2700 -
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"5⤵
- Suspicious use of WriteProcessMemory
PID:2880 -
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"6⤵
- Suspicious use of WriteProcessMemory
PID:2680 -
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"7⤵
- Suspicious use of WriteProcessMemory
PID:2576 -
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"8⤵
- Suspicious use of WriteProcessMemory
PID:1484 -
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"9⤵
- Suspicious use of WriteProcessMemory
PID:1356 -
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"10⤵
- Suspicious use of WriteProcessMemory
PID:1684 -
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"11⤵
- Suspicious use of WriteProcessMemory
PID:1576 -
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"12⤵
- Suspicious use of WriteProcessMemory
PID:1820 -
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"13⤵
- Suspicious use of WriteProcessMemory
PID:2940 -
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"14⤵
- Suspicious use of WriteProcessMemory
PID:2440 -
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"15⤵
- Suspicious use of WriteProcessMemory
PID:1376 -
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"16⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:2104 -
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"17⤵PID:1432
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"18⤵PID:2888
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"19⤵PID:2008
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"20⤵PID:1668
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"21⤵PID:2524
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"22⤵PID:1756
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"23⤵
- System Location Discovery: System Language Discovery
PID:2108 -
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"24⤵PID:1512
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"25⤵PID:2372
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"26⤵PID:2492
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"27⤵PID:3008
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"28⤵PID:2692
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"29⤵PID:2748
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"30⤵PID:2552
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"31⤵PID:2568
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"32⤵PID:2560
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"33⤵PID:2596
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"34⤵PID:792
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"35⤵PID:1952
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"36⤵PID:1696
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"37⤵PID:1684
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"38⤵PID:2324
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"39⤵PID:1332
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"40⤵PID:2248
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"41⤵PID:1468
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"42⤵PID:2172
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"43⤵PID:2604
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"44⤵PID:1372
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"45⤵
- System Location Discovery: System Language Discovery
PID:836 -
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"46⤵PID:3060
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"47⤵PID:3016
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"48⤵PID:2876
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"49⤵PID:2524
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"50⤵PID:2188
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"51⤵PID:2044
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"52⤵PID:1316
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"53⤵PID:1572
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"54⤵PID:2956
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"55⤵PID:2728
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"56⤵PID:3020
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"57⤵PID:3048
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"58⤵PID:2624
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"59⤵PID:1500
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"60⤵PID:596
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"61⤵PID:1068
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"62⤵PID:1484
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"63⤵PID:1356
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"64⤵PID:1516
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"65⤵PID:2020
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"66⤵PID:1044
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"67⤵PID:2868
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"68⤵PID:1284
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"69⤵PID:2416
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"70⤵PID:440
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"71⤵PID:948
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"72⤵PID:828
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"73⤵PID:1540
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"74⤵PID:864
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"75⤵PID:688
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"76⤵PID:2876
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"77⤵PID:2932
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"78⤵PID:2108
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"79⤵PID:1548
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"80⤵PID:1692
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"81⤵PID:2492
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"82⤵PID:984
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"83⤵PID:2760
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"84⤵PID:2696
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"85⤵PID:2716
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"86⤵PID:2768
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"87⤵PID:2568
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"88⤵PID:1800
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"89⤵PID:1208
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"90⤵PID:1160
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"91⤵PID:1952
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"92⤵PID:1636
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"93⤵PID:1984
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"94⤵PID:2436
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"95⤵PID:284
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"96⤵PID:2248
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"97⤵PID:1284
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"98⤵PID:2172
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"99⤵PID:1300
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"100⤵PID:948
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"101⤵PID:828
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"102⤵PID:2724
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"103⤵PID:3016
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"104⤵PID:2180
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"105⤵PID:3028
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"106⤵PID:880
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"107⤵PID:2108
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"108⤵PID:1548
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"109⤵PID:3024
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"110⤵PID:1528
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"111⤵PID:2896
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"112⤵PID:2788
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"113⤵PID:2192
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"114⤵PID:2368
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"115⤵PID:2824
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"116⤵PID:1156
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"117⤵PID:352
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"118⤵PID:2116
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"119⤵PID:1160
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"120⤵PID:2452
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"121⤵PID:628
-
C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b39838fbc2ad08718f1a6a5a6348e9d6_JaffaCakes118.exe"122⤵PID:832
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-