Resubmissions
22/06/2026, 11:19
260622-ne55eabs7p22/06/2026, 11:11
260622-nacbjabx21822/06/2026, 11:05
260622-m6zw2abs2j7Analysis
- max time kernel
22s - max time network
120s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260618-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
22/06/2026, 11:11
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
PhonkSpooferCtl (1).exe
Resource
win10v2004-20260513-en
26 signatures
150 seconds
Behavioral task
behavioral2
Sample
PhonkSpooferCtl (1).exe
Resource
win11ltsc2024-20260618-en
2 signatures
150 seconds
General
- Target PhonkSpooferCtl (1).exe
- Size 98KB
- Sample260622-nacbjabx21
- SHA256 1ce8624f72a5704b45fbd5832199a64452bfa44c106f8db55a7a568a3c7a012b
- MD5 bc22599f645fbfd49e24e34199ae4e62
- SHA1 2958f64c93112edb9f442318c0c9d53a5367b220
- SHA512 33480d9a68cbb4eda718d586a2021572ce4489201a0a4d269f692dbe184066e04a541f3a18b6ba6db89e7d9a78522598e40214ff5f16841eeeae031a0bb36dda
- SSDEEP 1536:RHLEgNQpPK9KpXvDqfDWLzbt85sQ0DOiL/HOLctLEj:NLBNsPK9SXLyWLSn0DxL/HOQtLEj
- TLSH T1EFA32A14999990BEE679D938DE539912EF323C4A8B50B7DF07904C9A1FB0A90DF7D302
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 5980 wrote to memory of 4588 5980 PhonkSpooferCtl (1).exe 88 PID 4588 wrote to memory of 4436 4588 PhonkSpooferCtl (1).exe 89 PID 4436 wrote to memory of 5784 4436 PhonkSpooferCtl (1).exe 90 PID 5784 wrote to memory of 4552 5784 PhonkSpooferCtl (1).exe 91 PID 4552 wrote to memory of 564 4552 PhonkSpooferCtl (1).exe 92 PID 564 wrote to memory of 2380 564 PhonkSpooferCtl (1).exe 93 PID 2380 wrote to memory of 5368 2380 PhonkSpooferCtl (1).exe 94 PID 5368 wrote to memory of 5320 5368 PhonkSpooferCtl (1).exe 95 PID 5320 wrote to memory of 5876 5320 PhonkSpooferCtl (1).exe 96 PID 5876 wrote to memory of 4796 5876 PhonkSpooferCtl (1).exe 97 PID 4796 wrote to memory of 2196 4796 PhonkSpooferCtl (1).exe 98 PID 2196 wrote to memory of 4896 2196 PhonkSpooferCtl (1).exe 99 PID 4896 wrote to memory of 3088 4896 PhonkSpooferCtl (1).exe 100 PID 3088 wrote to memory of 5988 3088 PhonkSpooferCtl (1).exe 101 PID 5988 wrote to memory of 5908 5988 PhonkSpooferCtl (1).exe 102 PID 5908 wrote to memory of 2516 5908 PhonkSpooferCtl (1).exe 103 PID 2516 wrote to memory of 4396 2516 PhonkSpooferCtl (1).exe 104 PID 4396 wrote to memory of 2576 4396 PhonkSpooferCtl (1).exe 105 PID 2576 wrote to memory of 3912 2576 PhonkSpooferCtl (1).exe 106 PID 3912 wrote to memory of 1248 3912 PhonkSpooferCtl (1).exe 107 PID 1248 wrote to memory of 2012 1248 PhonkSpooferCtl (1).exe 108 PID 2012 wrote to memory of 5816 2012 PhonkSpooferCtl (1).exe 109 PID 5816 wrote to memory of 372 5816 PhonkSpooferCtl (1).exe 110 PID 372 wrote to memory of 4900 372 PhonkSpooferCtl (1).exe 111 PID 4900 wrote to memory of 1200 4900 PhonkSpooferCtl (1).exe 112 PID 1200 wrote to memory of 1056 1200 PhonkSpooferCtl (1).exe 113 PID 1056 wrote to memory of 5600 1056 PhonkSpooferCtl (1).exe 114 PID 5600 wrote to memory of 5660 5600 PhonkSpooferCtl (1).exe 115 PID 5660 wrote to memory of 724 5660 PhonkSpooferCtl (1).exe 116 PID 724 wrote to memory of 4916 724 PhonkSpooferCtl (1).exe 117 PID 4916 wrote to memory of 2972 4916 PhonkSpooferCtl (1).exe 118 PID 2972 wrote to memory of 2032 2972 PhonkSpooferCtl (1).exe 119 PID 2032 wrote to memory of 4532 2032 PhonkSpooferCtl (1).exe 120 PID 4532 wrote to memory of 2004 4532 PhonkSpooferCtl (1).exe 121 PID 2004 wrote to memory of 484 2004 PhonkSpooferCtl (1).exe 122 PID 484 wrote to memory of 4784 484 PhonkSpooferCtl (1).exe 123 PID 4784 wrote to memory of 5152 4784 PhonkSpooferCtl (1).exe 124 PID 5152 wrote to memory of 1996 5152 PhonkSpooferCtl (1).exe 125 PID 1996 wrote to memory of 5040 1996 PhonkSpooferCtl (1).exe 126 PID 5040 wrote to memory of 5356 5040 PhonkSpooferCtl (1).exe 127 PID 5356 wrote to memory of 5668 5356 PhonkSpooferCtl (1).exe 128 PID 5668 wrote to memory of 2748 5668 PhonkSpooferCtl (1).exe 129 PID 2748 wrote to memory of 5704 2748 PhonkSpooferCtl (1).exe 130 PID 5704 wrote to memory of 2304 5704 PhonkSpooferCtl (1).exe 131 PID 2304 wrote to memory of 3440 2304 PhonkSpooferCtl (1).exe 132 PID 3440 wrote to memory of 3868 3440 PhonkSpooferCtl (1).exe 133 PID 3868 wrote to memory of 5616 3868 PhonkSpooferCtl (1).exe 134 PID 5616 wrote to memory of 5012 5616 PhonkSpooferCtl (1).exe 135 PID 5012 wrote to memory of 5428 5012 PhonkSpooferCtl (1).exe 136 PID 5428 wrote to memory of 1960 5428 PhonkSpooferCtl (1).exe 137 PID 1960 wrote to memory of 2540 1960 PhonkSpooferCtl (1).exe 138 PID 2540 wrote to memory of 1312 2540 PhonkSpooferCtl (1).exe 139 PID 1312 wrote to memory of 2992 1312 PhonkSpooferCtl (1).exe 140 PID 2992 wrote to memory of 5712 2992 PhonkSpooferCtl (1).exe 141 PID 5712 wrote to memory of 1372 5712 PhonkSpooferCtl (1).exe 142 PID 1372 wrote to memory of 488 1372 PhonkSpooferCtl (1).exe 143 PID 488 wrote to memory of 2248 488 PhonkSpooferCtl (1).exe 144 PID 2248 wrote to memory of 1648 2248 PhonkSpooferCtl (1).exe 145 PID 1648 wrote to memory of 3900 1648 PhonkSpooferCtl (1).exe 146 PID 3900 wrote to memory of 2900 3900 PhonkSpooferCtl (1).exe 147 PID 2900 wrote to memory of 5960 2900 PhonkSpooferCtl (1).exe 148 PID 5960 wrote to memory of 5588 5960 PhonkSpooferCtl (1).exe 149 PID 5588 wrote to memory of 3208 5588 PhonkSpooferCtl (1).exe 150 PID 3208 wrote to memory of 5752 3208 PhonkSpooferCtl (1).exe 151
Processes
-
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"1⤵
- Suspicious use of WriteProcessMemory
PID:5980 -
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"2⤵
- Suspicious use of WriteProcessMemory
PID:4588 -
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"3⤵
- Suspicious use of WriteProcessMemory
PID:4436 -
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"4⤵
- Suspicious use of WriteProcessMemory
PID:5784 -
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"5⤵
- Suspicious use of WriteProcessMemory
PID:4552 -
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"6⤵
- Suspicious use of WriteProcessMemory
PID:564 -
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"7⤵
- Suspicious use of WriteProcessMemory
PID:2380 -
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"8⤵
- Suspicious use of WriteProcessMemory
PID:5368 -
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"9⤵
- Suspicious use of WriteProcessMemory
PID:5320 -
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"10⤵
- Suspicious use of WriteProcessMemory
PID:5876 -
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"11⤵
- Suspicious use of WriteProcessMemory
PID:4796 -
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"12⤵
- Suspicious use of WriteProcessMemory
PID:2196 -
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"13⤵
- Suspicious use of WriteProcessMemory
PID:4896 -
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"14⤵
- Suspicious use of WriteProcessMemory
PID:3088 -
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"15⤵
- Suspicious use of WriteProcessMemory
PID:5988 -
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"16⤵
- Suspicious use of WriteProcessMemory
PID:5908 -
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"17⤵
- Suspicious use of WriteProcessMemory
PID:2516 -
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"18⤵
- Suspicious use of WriteProcessMemory
PID:4396 -
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"19⤵
- Suspicious use of WriteProcessMemory
PID:2576 -
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"20⤵
- Suspicious use of WriteProcessMemory
PID:3912 -
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"21⤵
- Suspicious use of WriteProcessMemory
PID:1248 -
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"22⤵
- Suspicious use of WriteProcessMemory
PID:2012 -
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"23⤵
- Suspicious use of WriteProcessMemory
PID:5816 -
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"24⤵
- Suspicious use of WriteProcessMemory
PID:372 -
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"25⤵
- Suspicious use of WriteProcessMemory
PID:4900 -
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"26⤵
- Suspicious use of WriteProcessMemory
PID:1200 -
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"27⤵
- Suspicious use of WriteProcessMemory
PID:1056 -
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"28⤵
- Suspicious use of WriteProcessMemory
PID:5600 -
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"29⤵
- Suspicious use of WriteProcessMemory
PID:5660 -
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"30⤵
- Suspicious use of WriteProcessMemory
PID:724 -
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"31⤵
- Suspicious use of WriteProcessMemory
PID:4916 -
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"32⤵
- Suspicious use of WriteProcessMemory
PID:2972 -
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"33⤵
- Suspicious use of WriteProcessMemory
PID:2032 -
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"34⤵
- Suspicious use of WriteProcessMemory
PID:4532 -
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"35⤵
- Suspicious use of WriteProcessMemory
PID:2004 -
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"36⤵
- Suspicious use of WriteProcessMemory
PID:484 -
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"37⤵
- Suspicious use of WriteProcessMemory
PID:4784 -
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"38⤵
- Suspicious use of WriteProcessMemory
PID:5152 -
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"39⤵
- Suspicious use of WriteProcessMemory
PID:1996 -
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"40⤵
- Suspicious use of WriteProcessMemory
PID:5040 -
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"41⤵
- Suspicious use of WriteProcessMemory
PID:5356 -
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"42⤵
- Suspicious use of WriteProcessMemory
PID:5668 -
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"43⤵
- Suspicious use of WriteProcessMemory
PID:2748 -
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"44⤵
- Suspicious use of WriteProcessMemory
PID:5704 -
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"45⤵
- Suspicious use of WriteProcessMemory
PID:2304 -
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"46⤵
- Suspicious use of WriteProcessMemory
PID:3440 -
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"47⤵
- Suspicious use of WriteProcessMemory
PID:3868 -
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"48⤵
- Suspicious use of WriteProcessMemory
PID:5616 -
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"49⤵
- Suspicious use of WriteProcessMemory
PID:5012 -
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"50⤵
- Suspicious use of WriteProcessMemory
PID:5428 -
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"51⤵
- Suspicious use of WriteProcessMemory
PID:1960 -
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"52⤵
- Suspicious use of WriteProcessMemory
PID:2540 -
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"53⤵
- Suspicious use of WriteProcessMemory
PID:1312 -
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"54⤵
- Suspicious use of WriteProcessMemory
PID:2992 -
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"55⤵
- Suspicious use of WriteProcessMemory
PID:5712 -
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"56⤵
- Suspicious use of WriteProcessMemory
PID:1372 -
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"57⤵
- Suspicious use of WriteProcessMemory
PID:488 -
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"58⤵
- Suspicious use of WriteProcessMemory
PID:2248 -
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"59⤵
- Suspicious use of WriteProcessMemory
PID:1648 -
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"60⤵
- Suspicious use of WriteProcessMemory
PID:3900 -
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"61⤵
- Suspicious use of WriteProcessMemory
PID:2900 -
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"62⤵
- Suspicious use of WriteProcessMemory
PID:5960 -
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"63⤵
- Suspicious use of WriteProcessMemory
PID:5588 -
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"64⤵
- Suspicious use of WriteProcessMemory
PID:3208 -
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"65⤵PID:5752
-
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"66⤵PID:4140
-
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"67⤵PID:1712
-
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"68⤵PID:5576
-
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"69⤵PID:4208
-
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"70⤵PID:3956
-
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"71⤵PID:1100
-
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"72⤵PID:3096
-
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"73⤵PID:4592
-
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"74⤵PID:3168
-
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"75⤵PID:984
-
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"76⤵PID:3468
-
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"77⤵PID:1536
-
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"78⤵PID:264
-
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"79⤵PID:3404
-
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"80⤵PID:5020
-
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"81⤵PID:4520
-
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"82⤵PID:2500
-
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"83⤵PID:5952
-
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"84⤵PID:5464
-
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"85⤵PID:5896
-
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"86⤵PID:3672
-
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"87⤵PID:2356
-
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"88⤵PID:2136
-
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"89⤵PID:4972
-
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"90⤵PID:5288
-
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"91⤵PID:1888
-
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"92⤵PID:1560
-
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"93⤵PID:4804
-
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"94⤵PID:2920
-
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"95⤵PID:2188
-
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"96⤵PID:1628
-
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"97⤵PID:2064
-
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"98⤵PID:4564
-
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"99⤵PID:3656
-
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"100⤵PID:1720
-
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"101⤵PID:3120
-
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"102⤵PID:4696
-
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"103⤵PID:5400
-
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"104⤵PID:5940
-
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"105⤵PID:4472
-
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"106⤵PID:5340
-
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"107⤵PID:5820
-
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"108⤵PID:1460
-
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"109⤵PID:2128
-
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"110⤵PID:3968
-
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"111⤵PID:1976
-
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"112⤵PID:2936
-
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"113⤵PID:3388
-
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"114⤵PID:5308
-
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"115⤵PID:5920
-
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"116⤵PID:4688
-
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"117⤵PID:4720
-
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"118⤵PID:5408
-
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"119⤵PID:2928
-
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"120⤵PID:1904
-
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"121⤵PID:704
-
C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"C:\Users\Admin\AppData\Local\Temp\PhonkSpooferCtl (1).exe"122⤵PID:5804
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-